Kyverno completes fuzzing security audit
Project post originally published on the Kyverno blog by Adam Korczynski Presenting the results from the fuzzing security audit Kyverno, a CNCF policy engine for Kubernetes, is happy to announce the completion of its fuzzing security…
Cloud Native Live: Kubernetes policy as code with Kyverno
Kyverno is a policy engine designed for Kubernetes which uses Kubernetes APIs for policy declarations, reporting, and exceptions. In this session, Kyverno maintainers Chip and Jim will discuss why policy as code is important for Kubernetes…
CNCF On demand webinar: Managing policy exceptions in Kubernetes using Kyverno
This webinar will demonstrate how policy exceptions can be used with Kyverno. Kyverno is a popular Kubernetes-native policy engine. Occasionally, workloads need to be exempted from policy enforcement. Kyverno allows this by configuring policy exceptions.
Verifying images in a private Amazon ECR with Kyverno and IAM Roles for Service Accounts (IRSA)
Community post originally published on GitHub by Shuting Zhao, a maintainer of Kyverno When running workloads in Amazon Elastic Kubernetes Service (EKS), it is essential to ensure supply chain security by verifying container image signatures and…
One-time pass codes for Kyverno
Community post originally published on Neon Mirrors by Chip Zoller In real life, imposed rules often have cases where exceptions may be required but on a case-by-case basis. Policy is really no different here. While prevention…
Using Kyverno with Pod Security Admission
Guest post originally published on the Kyverno blog by Kyverno Maintainers Using Pod Security Admission with Kyverno for the best of both worlds. Pod Security Admission (PSA) is the built-in successor to Kubernetes PodSecurityPolicy (PSP) and is enabled by…
PodSecurityPolicy migration with Kyverno
Project post originally published on the Kyverno blog As you’ve probably heard, PodSecurityPolicy (PSP) in Kubernetes is no more. After a deprecation beginning in v1.21, they were finally removed in v1.25. Many organizations out there are still relying…
Cloud Native Live: What’s new in Kyverno!
Kyverno is a policy engine designed for Kubernetes. In this session, Chip and Jim will cover the latest features in Kyverno and discuss how organizations are using Kyverno for Kubernetes governance at scale!
Project post originally published on the Kyverno blog Kyverno 1.10 released with featuring separate controllers, external service calls, Notary support, and tons more! The Kyverno team are proud to announce the release of Kyverno 1.10, a…
CNCF On demand webinar: Securely provisioning cloud resources using Kyverno and Crossplane
As platform teams build developer platforms, the need to enable secure self-service provisioning for cloud resources. In this webinar, we demonstrate how two of the most popular CNCF projects – Crossplane and Kyverno can be used…