Working with Exceptions for Kyverno Policies
summary
Kyverno enforces a rule that blocks workloads with >2 containers and exceptions are implemented as namespaced exceptions that match policy name, labels and new conditions in exceptions logic added during an LFX mentorship. Implementation runs as a Helm deployment as an admission controller on Kubernetes and is demoed with kubectl: violating deployments are rejected, a deployment labeled to match the exception passes, and the new condition-based matching is shown working.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:04What is Kyverno
- 3:58Policy exceptions
- 5:27Live demo
- 8:45Enhancing exceptions
- 9:07Q&A
related talks
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
49mKubernetes Policy as Code with Kyverno
46mKyverno: Compliance Inside Your Kubernetes Cluster
31mKubernetes Native Policy Management with Kyverno!
28mBeyond Admission: How Kyverno Extends Native Policies for Full Lifecycle Management
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
37mKyverno Introduction And Overview
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!