Enforce policies
Having a federated Kubernetes cluster will also allow us to enforce policies across the infrastructure providers. Kubernetes allows network and security policies to be applied across clusters.
A sample of a restrictive security policy sample has been shown—refer to the link https://kubernetes.io/docs/concepts/policy/pod-security-policy/ for the pod security policy. While pod security policy is beyond the scope of this book, let us take a look at its core constructs.
We start with the version and the kind of security policy. In the restricted example that is being referred to, the version is version 1, beta 1 (v1beta1). This is important, because depending on the version that is specified, the different keys in the file ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access