Kubernetes Native Policy Management with Kyverno!
summary
Kyverno is a Kubernetes-native policy engine implemented as CRDs plus an admission controller that processes requests from the API server (deployed via a single kubectl apply) and caches policies in memory to keep enforcement fast — the project claims under two seconds per admission review. Policies are declarative YAML with mutate, validate, generate rules; examples shown add an annotation for local-storage, block pods running as root (or switch to audit mode), and auto-create a default ResourceQuota on namespace creation. Integration with OPA and sync/variable features are in active development.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:32What is Kyverno?
- 2:43Why Policies?
- 5:11Why Kyverno?
- 8:53Kyverno Policies
- 10:52Mutate
- 12:01Validate
- 12:53Generate
- 15:15Three examples of Kyverno in action!
- 24:58What's next? Major features on our roadmap
- 26:54Summary and Takeaways
related talks
49mKubernetes Policy as Code with Kyverno
28mBeyond Admission: How Kyverno Extends Native Policies for Full Lifecycle Management
37mKyverno Introduction And Overview
33mUnlocking the Future of Kubernetes Policy as Code With Kyverno
06mProject Lightning Talk: Kyverno: Kubernetes Policy as Code Unleashed!
29mUnlocking Kyverno: Mastering Policy Management in Large-Scale Kubernetes Clusters
46mKyverno: Compliance Inside Your Kubernetes Cluster
42mBehold: A New Way to Deploy Pod Security Policies Using Kyverno!