Simplifying cluster security with CEL - Victor Cuadrado Juan

This talk covers the Common Expressions Language (CEL), which is designed for high-performance environments like cluster policies. The speaker discusses the advantages of CEL introduced in Kubernetes 1.29, including its applications in validating Custom Resource Definitions (CRDs) and Validating Admission Policies, while also highlighting its efficiency in policy writing. Attendees will learn about the features and trade-offs of CEL, its integration with dynamic admission controllers for enhanced security and compliance, and how to extend CEL libraries to incorporate context-aware capabilities and telemetry. The session also emphasizes the role of the CNCF project Kubewarden in leveraging CEL policies for improved effectiveness.