Policy-as-Data for Self-Healing SaaS: A Kubernetes-Native Approach
Abstract
We propose a scalable, Kubernetes-native approach to enforce security, configuration, and regulatory policies in multi-tenant SaaS. Each policy is stored as a versioned Custom Resource (Policy CR) in a Git repo (“Policy-as-Data”), synchronized via a GitOps agent, validated on create/update through a mutating admission webhook, and reconciled continuously by a self-healing controller. This closed-loop design minimizes manual intervention, provides drift detection, and enables automated remediation across hundreds of namespaces with minimal overhead.
Fields of Study & Subjects
Software System Performance and Reliability
Cloud Computing and Resource Management
Cloud Data Security Solutions
Publication details
- Journal / source
- International Journal of Inventions in Engineering & Science Technology
- Volume
- 12
- Issue
- 1
- Pages
- 28–33
- Publication date
- 1 January 2026
- Language
- EN