search

aws / eks-anywhere

Run Amazon EKS on your own infrastructure 🚀
https://anywhere.eks.amazonaws.com
Apache License 2.0
1.96k stars 284 forks source link

Security enhancement: enable Validating Admission Policy for EKS-A clusters #6782

Open Cajga opened 11 months ago

Cajga commented 11 months ago

What would you like to be added: Validating Admission Policy has been alpha since 1.26 and it graduated to beta in Kubernetes 1.28. We would like to start to use it on our EKS-A clusters.

Why is this needed: To be able to use a Kubernetes native feature for admission controller. While there are existing 3rd party solutions like Kyverno, OPA/Gatekeeper, Datree, these tools need to be maintained by the platform admins and some of them have very steep learning curve (rego). While Validating Admission Policy may not be a fit for all use cases (no external context during decision making) it is definitely provides enough flexibility to cover most of the use cases that a kubernetes platform require.

RuStyC0der commented 3 months ago

Hi, any updates or plans on this? Since this KEP has graduated to GA in 1.30 we would like to use it as native OPA/Gatekeeper alternative