The State of Stateful & Securing K8s: Admission Control with OPA

San Francisco Kubernetes Meetup

May 15, 2019, 1:30 – 3:45 AM

In-person event

About this event

Hello San Francisco Kubernauts!

Despite a little rain, we had a fun and educational meetup at Anaplan in April. If your schedule permits, please join us at Sauce Labs for the May meetup.

First on the program, Grant Schofield will present "State of Stateful."

Deploying and maintaining applications that require state, such as databases, on K8s can be daunting. Grant will discuss the history of running stateful applications. Then he'll highlight recent developments that have made running stateful applications more accessible for a greater number of engineering endeavors. Finally he will delve into deploying simple applications like Wordpress or Postgres in addition to more complex distributed systems, like Kafka, utilizing operators and CRDs.

Second on the program, Ash Narkar will present "Securing Kubernetes with Admission Control."

This talk will provide guidance on making sure K8s resources conform to external regulations and/or internal policies. This could include things like ensuring that images are pulled from a specific repository, or that all resources are labelled according to organizational guidelines. Admission Controllers go well beyond RBAC/ABAC to help put the necessary guardrails in place. Ash will demonstrate how the Open Policy Agent (OPA) provides a declarative approach to Admission Control to enforce custom policies on K8s objects without modifying any K8s components.

SPONSORED: Thanks to NetApp for ongoing support of the group and to Sauce Labs for hosting this month!

Are you a local member interested in presenting to the group? Submit your talk here:

6:30 - 7:00 - Social
7:00 - 7:10 - Community Announcements
7:10 - 7:40 - Grant Schofield, Humio
7:45 - 8:15 - Ash Narkar, Styra Inc.
8:15 - 8:45 - Social / Wrap-up


Grant Schofield is a developer at Humio. Grant has worked in technology for over twenty years at a variety of innovative companies such as ITA Software, Riskmetrics, Engine Yard, Basho, and Vevo where he was the Director of Infrastructure. An early adopter of Linux, he began his career at a dial-up ISP and over time broadened his skills from systems administration to software engineering.

Ash Narkar is a core contributor to the open source Open Policy Agent project. Ash has over 5 years of experience working on large-scale distributed systems. Ash is a Senior Software Engineer at Styra, Inc working on OPA development and integrations.
Twitter: ashtalk
Github: ashutosh-narkar


Sauce Labs is excited to host the group this month! When you arrive, please look for Sauce Labs signage and one of the Sauce Labs teamsters will greet you in the main lobby. Sauce Labs is located on the 3rd floor.



Wednesday, May 15, 2019
1:30 AM – 3:45 AM UTC


  • Jason Smith


    App Modernization Specialist

  • Reyann Lejano

    Red Hat

    Solutions Architect