Consider the future of Network Policy and our use of GKE

When we first started using GKE, Calico was the option that GKE provided that allowed us to enable the use of Pod Security Policies. This is still a growing portion of Kubernetes, both in terms of maturity at Google as well as by Kubernetes itself. GKE recently started to offer a replacement of Calico using what they call Dataplane V2.

Utilize this issue to determine a few things

  • What is the difference between our current usage of Calico and Dataplane V2
  • What changes do we need to make to our existing configurations to ensure backward compatibility
  • Is it safe for us to switch to using Dataplane V2

After we know the above we'll have a better answer to the next question

  • Do we upgrade our clusters to switch to using Dataplane V2 - if yes, spin up a new issue so we can build a story for swapping out clusters because upgrading to Dataplane V2 is currently not available.
Edited by John Skarbek