Design Patterns for Extendable, Scalable K8s Extensions

Max Smythe, Rita Zhang at KubeCon + CloudNativeCon North America 2020

OPA Gatekeeper is a customizable Kubernetes admission webhook that helps enforce policies and strengthen governance. The Gatekeeper project is capable of dynamically creating, managing and destroying new custom resources which are used to customize the webhook. This unique model has led to some interesting design patterns. In this talk, Gatekeeper's maintainters explore the CRDs-that-create-CRDs and leaderless horizontal scalability design patterns that allowed us to create an extendable, scalable Kubernetes extension.