Tag

#Admission Control

2 items tagged Admission Control.

Articles 1

Kubernetes intermediate

Kyverno Policies for Kubernetes Security: Validate, Mutate, Generate

Install Kyverno 1.19, write CEL-based ValidatingPolicy, MutatingPolicy and GeneratingPolicy resources for non-root pods, image tags, allowed registries and default-deny networking, and roll them out audit-first.

Jun 30, 2026 15 min read

Labs 1

Lab

Enforce Pod Security with Pod Security Admission and Kyverno

On a kind cluster, turn on the restricted Pod Security profile for a namespace, watch it reject a default pod, then add a Kyverno ValidatingPolicy in Audit mode, read the PolicyReport, and switch it to Deny.

intermediate 45 minutes Kubernetes · Kyverno