DevConf.CZ 2025

Kubernetes Networking: One Size Doesn’t Fit All
2025-06-12 , C228 (capacity 24)

By default, Kubernetes networking follows an open model—every pod within a cluster is connected to a single, shared network, allowing unrestricted communication. To enforce traffic restrictions, users must manually define Network Policies, which can be complex and cumbersome to design.

But what if we could rethink how Kubernetes networks are designed?

Join our interactive workshop as we challenge conventional Kubernetes networking. Using OVN-Kubernetes (a robust networking solution for Kubernetes) and KubeVirt (a virtual machine orchestrator for Kubernetes), we’ll explore how to create multiple, isolated cluster networks within the same Kubernetes cluster.

Through step-by-step guidance, you’ll learn how to:
✅ Set up a KIND (Kubernetes in Docker) cluster with OVN-Kubernetes and KubeVirt plugins
✅ Create multiple user-defined, isolated networks
✅ Attach workloads (VMs and pods) to these networks
✅ Achieve native workload isolation through network segmentation—without extra policy configurations

This hands-on tutorial will equip you with practical skills to secure Kubernetes workloads easily while meeting high-security standards. No more complex Network Policies—just simple, effective isolation.

Ready to rethink Kubernetes networking? Join us and take control of your cluster’s connectivity! No prior experience required! Just bring your laptop with Podman (or Docker), Kind and Kubectl installed.


What level of experience should the audience have to best understand your session?

Intermediate - attendees should be familiar with the subject

Miguel is a Principal Software Engineer for Openshift Virtualization at Red Hat.

His main interests are SDN / NFV, functional programming, containers, and virtualization.

Miguel is a member of the Network Plumbing Working Group, a maintainer of several CNI plugins (whereabouts, macvtap), and a contributor to some others (ovn-kubernetes, multus).

Surya is an Open Source advocate and contributor, active in the Kubernetes SIG-Network working group. She is working as a Principal Software Engineer at Red Hat in the OpenShift Networking team. Her areas of interest include Cloud Infrastructure and Networked Services and Systems. She loves solving problems in any sphere of life (specially if it involves coding and collaborating with people from diverse backgrounds). When she is not working, she loves to bike, swim and binge watch.