The JSON way to secure your Infrastructure: Kyverno-JSON!
summary
Kyverno-JSON is a CLI/REST/API library that validates non‑Kubernetes config by taking JSON/YAML payloads (convert Terraform with terraform show, Docker with nctl scan) and running Kyverno-style policies. Demo runs produce clear pass/fail outputs; example policies flag S3 buckets missing S3 versioning enabled and detect curl commands using --insecure; policies live under the nirmata policies repo and a web playground lets you iterate with live JMESPath expressions.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:48What is Kyverno
- 5:39Problem statement and Kyverno extension
- 8:08Kyverno-JSON purpose
- 13:47Demo overview
- 14:27S3 bucket versioning policy
- 17:00Certificate validation policy
- 19:09JSON Path expressions
- 25:53Dockerfiles to JSON payloads
- 27:16Resources and next steps
related talks
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
49mKubernetes Policy as Code with Kyverno
37mKyverno Introduction And Overview
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
27mPolicy-Based Infrastructure as Code with Kyverno
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!
46mKyverno: Compliance Inside Your Kubernetes Cluster
05mBeyond Guardrails: Resource Lifecycle Automation With Kyverno