Tag: #kyverno
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 7 posts
7 posts are tagged #kyverno; the most recent was published on 2026-05-25.
Often tagged together: #security 6 #open-source-internals 5 #policy 5 #cosign 2 #falco 2
Most read in the last 90 days:
- Kubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive
- Container & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive
- Kyverno Image Verification: Sigstore and Supply Chain Security
Container & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigKubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive ♪ Listenable
The full topology of Kubernetes security in 2026. Kyverno that became CNCF Graduated in November 2024, Rego-based OPA Gatekeeper, the built-in Validating Admission Policy that went GA in k8s 1.30 (CEL), the alpha Mutatin
2026-05-16 · 24 min read #kubernetes#security#admission-controller#kyverno#opa-gatekeeperKyverno Production Operations: HA, Monitoring, Troubleshooting
Production operations guide for Kyverno. Covers HA deployment (replicas, failurePolicy), PolicyReport/ClusterPolicyReport CRDs, Prometheus metrics and Grafana dashboards, background scanning, PolicyException mechanism, a
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno Architecture Internals: Kubernetes-Native Policy Engine
Deep dive into Kyverno architecture internals. Covers its design as a Kubernetes-native policy engine, Admission Controller/Background Controller/Reports Controller architecture, webhook configuration, ClusterPolicy vs P
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno vs OPA/Gatekeeper: Policy Engine Comparison
Compare Kyverno and OPA/Gatekeeper from architecture, policy language, features, performance, and ecosystem perspectives. Covers YAML/CEL vs Rego, mutation/generation support, image verification, webhook latency, memory
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno Image Verification: Sigstore and Supply Chain Security
Deep dive into Kyverno image verification capabilities. Covers verifyImages rules for cosign signature verification, Notary v2 support, in-toto attestation verification, SLSA provenance checking, Keyless/KMS key manageme
2026-03-20 · 15 min read #kyverno#policy#security#open-source-internalsKyverno Policy Engine Analysis: Validate, Mutate, Generate Rules Deep Dive
Deep dive into Kyverno policy engine internals. Covers match/exclude resource filters, validate rules (pattern matching, deny, CEL, foreach), mutate rules (patchStrategicMerge, patchesJson6902), generate rules (clone, sy
2026-03-20 · 14 min read #kyverno#policy#security#open-source-internals