Mission Platform: PolicyOps Across the Kubernetes Multi-verse
Talkat Platform Engineering Day North America 2025 · on Monday, 2025-11-10· at 15:20· Building B | Level 5 | Thomas Murphy Ballroom 1·
summary
Claim: combining Cordant (a control‑tower multi‑cluster platform) with Kyverno enforces declarative policies and fully automated, templated provisioning across clusters without custom admission webhooks. They use Cluster API, Cosmonaut/Cosmotron controllers, Sveltos, Crossplane, Argo CD and Prometheus to spin up service and cluster templates, apply image restrictions, non‑root and resource limits, and enforce TTLs. Real pain metrics: developers currently wait 3–5 days, platform engineers spend >50% of time on configs; the demo provisions compliant sandboxes (target <72h) and auto‑tears down successfully.
AI-written summary · about
chapters (7)
- 0:00Mission Platform and PolicyOps
- 3:57Why platform engineering matters
- 7:51Multicluster Kubernetes sprawl
- 13:47Cordant as control tower
- 17:18Kyverno policy autopilot
- 20:52Self-service provisioning with guardrails
- 25:10Closing and next steps
related talks
32mCloud Native Policy as Code: Principles and Best Practices
25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...
16mSecuring the Edge: Multi-Cluster Governance With Kyverno on K0rdent’s Fleets
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Gr...
31mKubernetes Native Policy Management with Kyverno!
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
36mCentralized Policy Management
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..