AdminNetworkPolicy: A New Kubernetes... Surya Seetharaman, Nadia Pinaeva, Andrew Stoycos & Yang Ding
Channel: CNCF [Cloud Native Computing Foundation]
Date: 22/11/2023

AdminNetworkPolicy: A New Kubernetes-Native API for Comprehensive Cluster-Wide Network Security - Surya Seetharaman, Nadia Pinaeva & Andrew Stoycos, Red Hat; Yang Ding, VMware

Network Policies help secure workloads in a Kubernetes cluster but are still under control of potentially untrusted applications and application authors. How can application security really be enforced by admins at the cluster-wide level? End-users have been asking for the ability to create non-overridable policies on clusters before the namespaces or workloads are created so that the default guardrails are already in place. Enter AdminNetworkPolicy + BaselineAdminNetworkPolicy: New resources (v0.1.0 released in May 2023) provided by Kubernetes SIG Network as part of the NetworkPolicyV2 API which aim to provide a comprehensive Kubernetes network security solution. But how does AdminNetworkPolicy interact with the core NetworkPolicy resource and what protection does it actually provide? Join the co-creators and maintainers of this API who will showcase these features through a live demo! Attendees will learn how to adopt and use this new API to secure workloads easily and efficiently.