Description
Kyverno is an open-source policy engine for Kubernetes that allows users to define and enforce policies using native Kubernetes YAML files. It intercepts your requests to the Kubernetes API and validate, mutate, or generate resources, ensuring that cluster configurations meet security, compliance, and operational requirements.
Kyverno Unified Policy As Code for Platform Engineers Secure, Automate, and Govern Your Infrastructure and Applications With Declarative Policy as Code.
Video Timeline:
00:00 - 03:40 - Introduction to Kyverno
03:41 - 06:12 - Installing Kyverno using Helm
06:13 - 11:00 - Kyverno validating policy to enforce limits on pods
11:01 - 13:13 - Kyverno mutating auto label policy on pods
13:14 - 16:55 - Kyverno validating label on namespace policy
16:56 - 20:24 - Kyverno mutating policy to add resource quota & limit range on namespaces
Prior knowledge of Kubernetes, Helm is needed for this tutorial.
To list all kyverno policies:
kubectl get kyverno -A