Search results for: kyverno


The need for speed: optimizing Kyverno’s performance

Posted on February 9, 2024 | Jim Bugwadia and Khaled Emara

Member post originally published on Nirmata’s blog by Jim Bugwadia and Khaled Emara About Kyverno Kyverno is a policy engine designed for Kubernetes and cloud native workloads. Policies can be managed as Kubernetes resources, and no…


Kyverno completes third-party security audit

Posted on December 5, 2023 | Kyverno maintainers

Member post originally published on Kyverno’s blog by Kyverno maintainers The Kyverno project is pleased to announce the completion of its third-party security audit. The audit was conducted by Ada Logics in collaboration with the Kyverno maintainers, the Open…


Kyverno release 1.11

Posted on November 23, 2023 | Shuting Zhao

Member post originally published on Nirmata’s blog by Shuting Zhao The Kyverno team is delighted to share a new Kyverno release, v1.11! This release marks a significant milestone for Kyverno, with an extensive development period of…


Kyverno expands beyond Kubernetes

Posted on November 6, 2023 | Kyverno Maintainers

Project post by Kyverno maintainers Kyverno, the open-source policy engine originally built for Kubernetes, is pleased to announce support for non-Kubernetes workloads, by supporting policies that operate on JSON payloads.  Due to its simplicity and wide…


Kyverno completes fuzzing security audit

Posted on September 12, 2023 | Adam Korczynski

Project post originally published on the Kyverno blog by Adam Korczynski Presenting the results from the fuzzing security audit Kyverno, a CNCF policy engine for Kubernetes, is happy to announce the completion of its fuzzing security…


Cloud Native Live: Kubernetes policy as code with Kyverno

Posted on September 6, 2023

Kyverno is a policy engine designed for Kubernetes which uses Kubernetes APIs for policy declarations, reporting, and exceptions. In this session, Kyverno maintainers Chip and Jim will discuss why policy as code is important for Kubernetes…


CNCF On demand webinar: Managing policy exceptions in Kubernetes using Kyverno

Posted on August 31, 2023

This webinar will demonstrate how policy exceptions can be used with Kyverno. Kyverno is a popular Kubernetes-native policy engine. Occasionally, workloads need to be exempted from policy enforcement. Kyverno allows this by configuring policy exceptions.


Verifying images in a private Amazon ECR with Kyverno and IAM Roles for Service Accounts (IRSA)

Posted on August 29, 2023 | Shuting Zhao

Community post originally published on GitHub by Shuting Zhao, a maintainer of Kyverno When running workloads in Amazon Elastic Kubernetes Service (EKS), it is essential to ensure supply chain security by verifying container image signatures and…


One-time pass codes for Kyverno

Posted on August 11, 2023

Community post originally published on Neon Mirrors by Chip Zoller In real life, imposed rules often have cases where exceptions may be required but on a case-by-case basis. Policy is really no different here. While prevention…


Using Kyverno with Pod Security Admission

Posted on July 18, 2023

Guest post originally published on the Kyverno blog by Kyverno Maintainers Using Pod Security Admission with Kyverno for the best of both worlds. Pod Security Admission (PSA) is the built-in successor to Kubernetes PodSecurityPolicy (PSP) and is enabled by…