Understanding Kyverno in a Visual Way
summary
Shows concrete visuals and demos of Kyverno primitives and real configs: mutate existing that adds labels and resource requests to running pods, a generate rule that clones Secrets and keeps them synchronized, audit-mode policies that report violations and a delete rule that removes Jobs older than a week, plus an image verification flow that mutates image refs to digests and checks signatures. Mentions a migration tool to convert legacy ClusterPolicy CRDs into the newer validating/mutating/auditing policies; claims good performance on cluster-scale workloads.
AI-written summary · about
chapters (10)
- 0:00Kyverno introduction
- 6:10Open source policy engine
- 9:51Kyverno policy types
- 13:12Mutate rules use cases
- 16:13Generate rules creation
- 18:55Cleanup and performance
- 21:15Supply chain security
- 22:50Use cases and apps
- 23:26Conclusion
- 25:01Q&A migration
related talks
37mKyverno Introduction And Overview
49mKubernetes Policy as Code with Kyverno
28mBeyond Admission: How Kyverno Extends Native Policies for Full Lifecycle Management
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
46mKyverno: Compliance Inside Your Kubernetes Cluster
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
31mKubernetes Native Policy Management with Kyverno!
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters