Project Lightning Talk: The Kyverno Five! Policy Types for the Full Resource Lifecycle
summary
Kyverno defines five concrete policy types: mutating adds labels, defaults, and annotations to turn raw YAML into platform-ready resources; image validating verifies image provenance and signatures before run; validating enforces admission decisions (allow, warn, deny) at the gate; generating auto-creates networkpolicies, quotas, imagePullSecrets when a namespace appears; deleting garbage-collects completed jobs and ephemeral previews. Policies use CEL, run in the Kubernetes admission flow, and leverage native API objects and RBAC.
AI-written summary · about
related talks
06mProject Lightning Talk: Kyverno Lightning Update: CEL & Policy Types in Action
31mKubernetes Native Policy Management with Kyverno!
32mCloud Native Policy as Code: Principles and Best Practices
37mKyverno Introduction And Overview
27mUnderstanding Kyverno in a Visual Way
39mKyverno Playground: Make Policy Testing a Breeze and Enjoy the Process!
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!