~/talk

How Kyverno has Changed Platform Engineering Security

recording made private on YouTubehttps://youtu.be/bWDuJ94NhGo
Talkat KyvernoCon Virtual Event 2025 · on Wednesday, 2025-09-17· [security, platform-engineering]
links:none on file
video:https://youtu.be/bWDuJ94NhGo (made private)
slides:none on file

Kyverno replaces scattered DevOps guardrails with centralized, GitOps-managed policies that audit, mutate and block Kubernetes manifests across multi‑cloud clusters; used at Itaú Unibanco to find 1,000s of deployments missing observability labels and to auto‑inject labels so metrics and logs flow correctly. Policy life cycle runs in reporting mode then staged rollout with telemetry for cost and compliance, enforces private container registries and runAsUser rules, and prevents secret leakage while keeping developers productive by following audit first and mutate and block patterns.

AI-written summary · about

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.