Kyverno

wikipedia:Kyverno Kubernetes Native Policy Management

• https://kyverno.io/

OpenReplay: openreplay -i

# kubectl get pods -A | grep kyverno
app           kyverno-admission-controller-d574d8d8b-mhfvj               1/1     Running     0          16m
app           kyverno-background-controller-765fbfdc56-rpxmj             1/1     Running     0          16m
app           kyverno-cleanup-admission-reports-29743990-snv59           0/1     Completed   0          4m33s
app           kyverno-cleanup-cluster-admission-reports-29743990-xwmmj   0/1     Completed   0          4m33s
app           kyverno-cleanup-controller-7588887798-8rcfq                1/1     Running     0          16m
app           kyverno-reports-controller-7f8c64fdb-77gtt                 1/1     Running     0          16m

Installation:

helm upgrade --install kyverno kyverno \
 --namespace kyverno-system \
 --version $KYVERNO_CHART_VERSION \
 --create-namespace \
 --repo https://kyverno.github.io/kyverno/

Activities

• Read Managing Pod Security on Amazon EKS with Kyverno
• Read Learn how to set Certificate defaults automatically using Kyverno

Related

• kind: NetworkPolicy
• Pod security
• Kubernetes security

See also

• Kyverno
• Kubernetes Addons, tEKS: [ admiralty | kubecost ]
• Kubernetes policies, policy libraries, OPA, Gatekeeper (Kubernetes), Kyverno