News for hackers. Stuff that matters.

A comment on Gatekeeper – Policy Controller for Kubernetes. Parent comment

Re:Gatekeeper – Policy Controller for Kubernetes by Rapzid on Friday September 20, 2019 @08:40PM (#21032694)
Ah, I think I get it now. So you could reject deployments for oversubscribing resources or using unsupported docker repos, as some contrived examples.
[ Parent | on HN ]
Re:Gatekeeper – Policy Controller for Kubernetes by charlieegan3 on Friday September 20, 2019 @08:57PM (#21032769)
Yeah exactly. Kubernetes has some good built in tools for resource checking (and pods in general imo). I've found this most useful for asserting rules on ingress and services to control exposing of services to the public.
[ Parent | on HN ]
Re:Gatekeeper – Policy Controller for Kubernetes by twblalock on Friday September 20, 2019 @11:07PM (#21033228)
The nice thing is that you don't need to write custom admission controllers for each of your policies. You just need to write the policies and give them to Gatekeeper.
[ Parent | on HN ]