Policy-Based Governance for End-to-End Integrity Control of Policies

Explore a conference talk on policy-based governance for end-to-end integrity control of policies in Open Cluster Management (OCM). Discover how OCM, a CNCF sandbox project, simplifies multi-cluster and multi-cloud Kubernetes management. Learn about the OCM policy framework's role in meeting enterprise security and compliance standards. Understand the importance of policy integrity and how manifest signing protects against modifications. Dive into the process of enabling signing using templated secrets for secure delivery of signing keys and access credentials. Examine how policies facilitate encrypted secret value delivery from hub to cluster and subsequent decryption. Gain insights into implementing admission control for enforcing signature verification of policy resources at the cluster level.

Policy-Based Governance for End-to-End Integrity Control of... Yuji Watanabe & Jayashree Ramanathan