Unlocking the Future of Kubernetes Policy as Code With Kyverno
Talkat KubeCon + CloudNativeCon Europe 2025 · on Thursday, 2025-04-03· at 16:00· Platinum Suite | Level 3 | Room 3-4·
summary
Kyverno extends Kubernetes admission with new CRD policy types (validating and image-validating now; mutating, generate, cleanup coming) and adopts CEL expressions plus retained features like resource lookups and background scans so one API handles Kubernetes and arbitrary JSON payloads. Demo verifies images using cosign and notary (network verification passes for signed images, fails for unsigned), shows configmap-driven allowlists and an image helper, and cites a real-world policy that cuts costs by 50% via autoscaler generation. New RC is available to try.
AI-written summary · about
chapters (4)
- 0:00Introduction to Kyverno
- 10:11Evolution of Kyverno policies
- 15:50New policy types in Kyverno
- 22:47Policy demonstrations
related talks
49mKubernetes Policy as Code with Kyverno
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
31mKubernetes Native Policy Management with Kyverno!
28mBeyond Admission: How Kyverno Extends Native Policies for Full Lifecycle Management
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
27mUnderstanding Kyverno in a Visual Way
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!
46mKyverno: Compliance Inside Your Kubernetes Cluster