KyvernoCon Virtual 2026
2026-05-06
-- online --
as the organisers put it
Virtual Event - KyvernoCon Virtual 2026 will expand access to policy-as-code conversations by offering a fully virtual, globally accessible event.
who it's for
platform engineers, security engineers, kubernetes operators, devops engineers, site reliability engineers, compliance engineers, cloud architects
topics
CEL policy expressions for Kyverno; Kyverno mutate policies; Kyverno generate policies for rebac; admission webhook topology and latency; gatekeeper to Kyverno migration; cosign and C2PA model verification; gitops drift prevention with Kyverno; policy reports and external report server; llm inference cost and security guardrails; iso27001/BSI controls implemented with policies; cleanup ttl and automated reconciliation
| title | author | length |
|---|---|---|
| Welcome & Opening Remarks | Cortney Nickerson | 04m |
Kyverno started as an internal tool in 2019 and now secures thousands of clusters across enterprises of all sizes, having just graduated CNCF at the end of… | ||
| From YAML to CEL: Understanding Kyverno’s New Policy Model | Kirti Goyal | 11m |
Kyverno replaces YAML patterns and JMESPath with CEL expressions, switching from “describe a shape” to “evaluate true/false or return an object.” Policies… | ||
| Poison Control: Unifying Software and Content... | Anmol Krishan Sachdeva, Ankit Kotnala | 34m |
Demonstrates a concrete Dual-Provenance Pattern that ties cosign-verified OCI image signatures to content checks: Kyverno cluster policies inject an… | ||
| From Policy to Production: Implementing ISO27001/BSI IT-Gr... | Marcus Ross | 23m |
Operator runs ~35 Kubernetes clusters and maps BSI/ISO27001 controls to Kyverno. Three implemented controls: generate NetworkPolicy to enforce namespace‑level… | ||
| ReBAC with Kyverno: Automating Multi-Tenant RBAC at Scale | Pavan Madduri | 24m |
Replaces manual per-namespace RBAC with an automated ReBAC system using Kyverno generate policies so that 6 generate policies create three tiered roles and… | ||
| Drift Prevention in GitOps Workflows Using Kyverno | Omolade Akinwumi | 22m |
You see a concrete workflow: Kyverno runs as an admission webhook and rejects or auto-patches requests before they hit etcd so a kubectl edit that would create… | ||
| Policy-as-Code for LLM Inference: Cost & Security Guardrails | Sakalya Deshpande | 19m |
Kyverno validating and mutating policies enforce GPU and cost guardrails at admission time for Kubernetes LLM inference, rejecting deployments that exceed… | ||
| Webhook Topology and Admission Latency: Lessons from Migration | Tanat Lokejaroenlarb | 13m |
Migrating Gatekeeper policies to Kyverno’s ValidatingPolicy yields a surprising production effect: per-policy webhook entries cause the API server to rebuild… | ||
| Closing Remarks | Cortney Nickerson | 04m |
Announces concrete project steps: a Kyverno steering committee is now part of project governance and seats begin filling toward KyvernoCon NA; Policy Bites… | ||
| nothing matches | ||