Kyverno Introduction And Overview
Talkat KubeCon + CloudNativeCon North America 2022 · on Thursday, 2022-10-27· at 15:25· 252 AB, Huntington Place: 1 Washington Blvd·
summary
Kyverno is a Kubernetes-native admission controller that validates, mutates and generates resources using YAML policies and a CLI for dry runs and CI integration. It verifies OCI image signatures with image verification via Cosign and writes violations to standard PolicyReport CRs. v1.8 adds a pod security subrule, YAML manifest signature checks, multi-object cloning, autogen pod-controller rules, OpenTelemetry and new JMESPath filters like random and x509 decode. Community library has ~230 sample policies and the project has ~3,000 stars.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:27Why Policy?
- 2:31What Can Policy Deliver?
- 4:43Kyverno Features
- 8:24Sample Policy
- 9:13Kyverno Components
- 10:23Policy Structure
- 15:57Generate
- 17:54Image Verification
- 19:50Policy Reports
- 29:08Questions
related talks
31mKubernetes Native Policy Management with Kyverno!
46mKyverno: Compliance Inside Your Kubernetes Cluster
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!
27mUnderstanding Kyverno in a Visual Way
39mKyverno Playground: Make Policy Testing a Breeze and Enjoy the Process!
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
35mShift-Left Policy Validation in Kubernetes With Kyvern...