search

cloud-ark / kubeplus

Kubernetes Operator for multi-instance multi-tenancy
https://cloudark.io/
Apache License 2.0
654 stars 78 forks source link

Interoperability of cluster governance tools and multi-instance SaaS for platform engineering #1232

Closed devdattakulkarni closed 4 months ago

devdattakulkarni commented 5 months ago

Platform engineering teams use policy and governance tools such as OPA/Kyverno. When a Platform engineering team adds KubePlus for its multi-instance SaaS capability to such clusters, we want to ensure that the new APIs that will be registered will not be blocked by the policy/governance tools.

What we need here is, as part of registering the KubePlus APIs, we should check if any policy/governance tool is present on the cluster. If it is present, then we should update the policies to allow the registered APIs to be used on the cluster.

devdattakulkarni commented 4 months ago

It is not clear if there is any work that needs to be done in KubePlus for this. It will be up to the Platform Engineering teams to add the required Kyverno policies. For this reason, closing this issue.