Compliance as Code in Kubernetes

In this episode of the Virtual Coffee with Ashish edition, we spoke with Jim Bugwadia (Jim's Twitter) about policy management and compliance as code for Kubernetes and how you can use open source tools like Kyverno and OPA for policy management

Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv

Host Twitter: Ashish Rajan (@hashishrajan)

Guest Twitter:  Jim Bugwadia (Jim's Twitter) 

Podcast Twitter - @CloudSecPod @CloudSecureNews

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- Cloud Security News 

- Cloud Security Academy

Spotify TimeStamp for Interview Questions

(00:00) Ashish's Intro to the Episode

(03:20) https://snyk.io/csp

(05:23) What is Kubernetes Control Plane?

(06:51) What is an admission controller?

(08:01) What do you need policy management in Kubernetes?

(10:13) Pod Security and Policy management

(11:57) Policy Management in Managed Kubernetes

(13:54) Scaling Policy Management for Kubernetes

(19:34) Common use cases for policy management

(25:30) Compliance in Kubernetes

(32:04) Levels of Maturity in Kubernetes Policy Management

(36:47) Future of policy as code

(38:46) Kyverno vs OPA

(43:39) Kyverno vs gatekeeper

(45:15) Where to start with policy management?

(46:11) Where you can find Jim