Abstract: A method of managing and deploying network resources, comprising employing a container management tool in a network that implements resources through one or more containers, and engaging a policy extension with the container management tool. The policy extension may be configured to define and enforce user intent in a forwarding plane of the network. The method may comprise using a declarative programming language to convey the intent of the user to the policy extension. The container management tool may be Kubernetes, and the policy extension may define policy as a Custom Resource Definition. The container may comprise a microservice packaged along with associated dependencies and configurations. The method may further comprise defining, by the user, (i) at least one network resource, (ii) at least one service, (iii) at least one policy, and (iv) delivering network data traffic to the at least one service according to the at least one policy.