KyvernoCon NA 2025
as the organisers put it
KyvernoCon North America 2025 has officially wrapped! Thank you to all the attendees who joined us. Watch keynotes and all breakout sessions on the CNCF YouTube Channel. Review session slides from…
who it's for
platform engineers, kubernetes operators, security engineers, ml platform engineers, devops engineers, site reliability engineers, compliance engineers, open source maintainers
topics
Kyverno policy types with CEL; Kyverno Playground for policy testing; policy-driven placement with Metaflow; image verification to digests and signatures; generate-and-mutate Kyverno rules; CIS automation with OpenTofu and kube-bench; Argo CD ApplicationSet plus Kueue for GPU scheduling; vector-database driven policy generation; Kyverno for Terraform integrations; migration of ClusterPolicy to validating/mutating/auditing policies
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Cortney Nickerson, Jim Bugwadia | 07m |
Kyverno originates in 2019 at Nirmata and is donated to CNCF in 2020, and the project now claims 7,000+ stars on its main repo and 400+ contributors across… | ||
| Your AI Is a Toddler With Root Access: Why Kubernetes Policies Are Your Last Line... | Viktor Farcic | 25m |
Claim: AI agents can rapidly create and deploy misconfigured resources so Kubernetes admission policies must be enforced as last-line blast doors. Demo builds… | ||
| Policy-based Compute Orchestration for AI/ML Workloads | Saurabh Garg, Dolis Sharma | 32m |
Shows a working pattern that glues Metaflow job submission to policy-driven placement with Kyverno + Metaflow, using an external configmap-driven routing… | ||
| Understanding Kyverno in a Visual Way | Aurélie Vache | 27m |
Shows concrete visuals and demos of Kyverno primitives and real configs: mutate existing that adds labels and resource requests to running pods, a generate… | ||
| Lightning Talk: CEL: Hidden Feature of Kyverno Playground | Hoon Jo | |
Shows that Kyverno Playground can be used to validate Kubernetes-native CEL expressions and run another policy-as-code without installing Kyverno itself. Demo… | ||
| Shift Left in Action: Automating CIS Compliance With Kyverno and CNCF Power Too... | Yugandhar Suthari | 25m |
Shows a working CNCF-native CIS automation: Kyverno as policy orchestrator, OpenTofu plan -> JSON scanning, and kube-bench plus a daemonset node scanner for… | ||
| Taming the Wild West of Research Computing: How Policies Saved Us a Thousand... | Alessandro Pomponio | 24m |
Describes deploying OpenShift GitOps/Argo CD with ApplicationSet plus Kyverno and Kueue to stop GPU waste and noisy CPU jobs: automatic Argo Application… | ||
| Closing Remarks | Cortney Nickerson, Jim Bugwadia | 04m |
Conference day closes noting a 10-year project milestone and the first KyvernoCon while maintainers dial in remotely. Key specifics: creation of a Kyverno… | ||
| nothing matches | ||