Shift-Left Policy Validation in Kubernetes With Kyvern...
Talkat Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 · 2025-12-08..12-10·
summary
Shows embedding an open source Kubernetes agent to catch runtime policy failures before merge: kagent runs in-cluster, uses Helm rendering, Kubernetes API and MCP-based tools to run Kyverno policies and compute a live diff versus Git, then posts a PR review with impact prediction and remediation steps. Demo detects three real issues (missing node label causing unschedulable pods, missing securityContext triggering Kyverno deny, absent CPU/memory requests), suggests fixes, revalidates in CI, and succeeds on deploy.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:07CI/CD pipeline failures
- 2:08GitOps foundations
- 3:54Kyverno as policy engine
- 4:55Kyverno’s context-blind demo
- 8:46Context gap in validation
- 10:10Shift-left with AI feedback
- 13:00Bridging gap with K Agent
- 15:30Semantic validation demo
- 25:10K Agent for context-aware validation
- 27:57K Agent configuration
- 30:53Limitations and future
- 33:25Semantic validation benefits
related talks
49mKubernetes Policy as Code with Kyverno
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
31mKubernetes Native Policy Management with Kyverno!
28mBeyond Admission: How Kyverno Extends Native Policies for Full Lifecycle Management
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
37mKyverno Introduction And Overview
27mUnderstanding Kyverno in a Visual Way
46mKyverno: Compliance Inside Your Kubernetes Cluster