Kubernetes has a number of mechanisms to enforce policy: some built-in, like quota and NetworkPolicy; some extensions or add-ons like OPA. John Murray, a product manager at Google Cloud, joins Craig and Adam to talk about policy and configuration, and introduce the new CSP Config Management tool launched to Beta along with the new Cloud Services Platform.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

Chatter of the week

• Adam is in the news!
• Cat Lady
• Craig's Oscar prediction and Rami Malek's incident

News of the week

• Google brings Cloud Services Platform to Beta
  • Application Modernization and the Decoupling of Infrastructure Services and Teams by Eric Brewer and Jennifer Lin
• Developer preview of OpenShift v4
• Knative v0.4
• Update to Azure DevOps Projects support for Azure Kubernetes Service
• The service mesh era: Securing your environment with Istio by Samrat Ray of Google Cloud
• Cloud Native DevOps with Kubernetes by John Arundel and Justin Domingus
  • Get it free* from NGINX
• All new Reddit services run on Kubernetes
• Breaking Docker via runC by Yuval Avrahami of Twistlock
• Secure Kubernetes with Vault by Bjorn Wenzel
• Migrating from Heroku to GKE
• How to prepare for a Kubernetes interview
• Adding "containers" to Linux

Links from the interview

• ResourceQuota, PodSecurityPolicy and NetworkPolicy
• Open Policy Agent
  • Kubernetes integration
• CSP Config Management
  • Take control of your clusters with CSP Config Management (blog post)
• John Murray on Twitter