Securing the Edge: Multi-Cluster Governance With Kyverno on K0rdent’s Fleets
Talkat Kubernetes on Edge Day North America 2025 · on Monday, 2025-11-10· at 11:50· Building B | Level 2 | B203·
summary
Demonstrates deploying Kyverno across k0rdent fleets with k0s so policies bootstrap at workload-cluster creation via a service template/Helm chart, enforcing validate, mutate, generate, cleanup rules fleet-wide; shows scanning non-Kubernetes JSON (Terraform, Dockerfiles) and automating image/signature checks and GPU dynamic resource allocation (DRA) for edge AI. Targets hundreds of edge nodes (examples around 50 clusters), patches pods automatically to add security contexts, generates network or RBAC artifacts, and integrates with CI/CD or offline pipelines for policy-as-code.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:21Edge computing challenges
- 1:51K0rden and capabilities
- 3:56Drift and security in edge clusters
- 6:05Policies in Kubernetes
- 8:50Kyverno as policy engine
- 10:17Kyverno policy types
- 12:03Enforcing security with Kyverno
- 15:10Q&A
related talks
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
30mPolicy & GitOps Unite! Kyverno and Flux Save Cluster City
35mShift-Left Policy Validation in Kubernetes With Kyvern...
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
27mUnderstanding Kyverno in a Visual Way
49mKubernetes Policy as Code with Kyverno
46mKyverno: Compliance Inside Your Kubernetes Cluster
37mKyverno Introduction And Overview