Platform Automation with Kyverno
summary
Kyverno automates platform tasks with three concrete demos: copy and sync ConfigMaps (clones a certificate from one platform namespace to existing and newly created namespaces), refresh env vars by annotating deployments (watches labeled Secrets, injects an 8‑char random annotation, triggers rollouts — new pod appears in ~3 seconds), and clean up orphan pods on schedule (Kyverno 1.9 deletes non‑owned “bear” pods via a cron schedule). Demos require granting Kyverno specific RBAC for update/delete and succeed end‑to‑end.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:27Agenda
- 0:50Kyverno Overview
- 3:00Copy-and-sync ConfigMaps
- 6:56Refresh env vars in Pods
- 13:13Clean up bare Pods
related talks
27mUnderstanding Kyverno in a Visual Way
05mBeyond Guardrails: Resource Lifecycle Automation With Kyverno
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
49mKubernetes Policy as Code with Kyverno
46mKyverno: Compliance Inside Your Kubernetes Cluster
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
35mShift-Left Policy Validation in Kubernetes With Kyvern...