Project Lightning Talk: Kyverno Lightning Update: CEL & Policy Types in Action
Lightningat KubeCon + CloudNativeCon China 2025 · on Tuesday, 2025-06-10· at 12:03· Level 16 | Grand Ballroom I·
summary
Kyverno now embeds CEL as its expression language, moves to a unified architecture with consistent APIs, and adds 5 policy types slated for 1.14: validating, image-validating, mutating, generating, and deleting (scheduled cleanup). Policies run server-side with Kyverno’s reporting, webhook timeout controls, and the ability to auto-generate ValidatingAdmissionPolicy and cover Pod controllers. Examples execute in the Kyverno playground so you can try conversions and enforcement without a cluster.
AI-written summary · about
related talks
06mProject Lightning Talk: The Kyverno Five! Policy Types for the Full Resource Lifecycle
34mKyverno Gets Smarter: Writing Dynamic Policies with CEL
11mFrom YAML to CEL: Understanding Kyverno’s New Policy Model
06mLightning Talk: Why Your Cluster-Wide Policies Are a Risk (And What To Do About It)
27mUnderstanding Kyverno in a Visual Way
37mKyverno Introduction And Overview
31mKubernetes Native Policy Management with Kyverno!
39mKyverno Playground: Make Policy Testing a Breeze and Enjoy the Process!