Skip to content

Tutorial: Mind Your Pod's Business: Network Isolation Workshop#

KubeCon + CloudNativeCon Europe 2025 (London) digest Program Adjacent pick London · 1–4 April 2025

Abstract

Surya Seetharaman & Miguel Duarte Barroso, Red Hat; Keith Burdis, Goldman Sachs — Adjacent

  • Why: A concrete, regulation-driven use case (EU NIS2 Directive) for network segmentation beyond Kubernetes' unrestricted-by-default pod networking, including the Layer 2 gap (VM/telecom workloads) that plain NetworkPolicies don't cover.
  • What: A hands-on workshop achieving native network isolation for pods and VMs using CNI, KubeVirt, and OVN-Kubernetes, addressing both standard NetworkPolicy gaps and Layer 2 (Ethernet-level) isolation needs. (from abstract only)
  • How: Configures CNI/OVN-Kubernetes/KubeVirt plugins on KIND clusters to create isolated networks and attach workloads (pods and VMs) to them, covering the segmentation cases plain NetworkPolicies leave open. (from abstract only)
  • Where applicable: Regulated environments (explicitly framed around EU NIS2 compliance) and mixed VM/container workloads via KubeVirt; general technique for Layer 2 isolation gaps in Kubernetes networking.