<div dir="ltr"><div class="gmail_default" style="font-size:small">I am overdue to give an update of the work i've been doing around secure isolation in Kubernetes.</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style=""><span style="font-size:small"><a href="https://docs.google.com/document/d/1QQ5u1RBDLXWvC8K3pscTtTRThsOeBSts_imYEoRyw8A/edit?usp=sharing" target="_blank">This document</a> captures much of my current understanding of the space. To q</span>uote the goals of this document:</div><div class="gmail_default" style=""><font face="arial, helvetica, sans-serif"><br></font></div><div class="gmail_default" style=""><font face="arial, helvetica, sans-serif"><b style="font-weight:normal" id="m_7700994340720060383gmail-docs-internal-guid-65c11887-8d30-2179-e5db-f03f62426332"><ol style="margin-top:0pt;margin-bottom:0pt"><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Define the specific problems we are trying to address with secure isolation.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Develop common terminology & understanding of the problem & solution space.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Capture all the requirements, considerations, notes, resources, and discussions around Kubernetes secure isolation in single place to defrag isolation discussions.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Provide a structure for evaluating potential solutions.</span></p></li></ol></b><br></font></div><div class="gmail_default" style="">This is <i>not</i> a solution proposal, but I am hoping that it will provide a smooth path for follow up discussions and lead to a widely accepted solution.</div><div class="gmail_default" style=""><br></div><div class="gmail_default" style="">I will be presenting this document at the <a href="https://github.com/kubernetes/community/tree/master/sig-node">sig-node community meeting</a> on 02-13 (tomorrow), and am hoping to discuss it in more detail in sig-node on 02-20 and sig-auth on 02-21. Please join the discussion in any meetings or comments on the doc.</div><div class="gmail_default" style=""><br></div><div class="gmail_default" style="">Thank you,</div><div class="gmail_default" style=""><br></div><div class="gmail_default" style="">Tim Allclair</div><div class="gmail_default" style="">@tallclair</div></div>