Kyverno Kubernetes Policy Management (Edited Rerun)

A highly-streamlined edit of a previous live show, which I'm calling "reruns". Jim Bugwadia, CEO and co-founder of Nirmata, and founder of Kyverno (a CNCF Sandbox Project), joins me to discuss Kubernetes policy management and "intelligent guardrails for K8s". Support this show on Patreon! It's the #1 way to support this show, my podcast, and open source   / bretfisher   Join the discussion on our Discord chat server https://devops.fan Topics ========= https://kyverno.io Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources plus ensure OCI image supply chain security. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline. https://nirmata.com "Intelligent Guardrails for Kubernetes." Security, Compliance and Operational Readiness of Kubernetes Across the Enterprise Sigstore https://www.sigstore.dev/ Sigstore about https://thenewstack.io/linux-foundati... OWASP Open Web Application Security Project https://owasp.org/ Bret Fisher ========= Best coupons for my Docker and Kubernetes courses at https://www.bretfisher.com/courses Listen to my podcast of this show's past episodes at https://www.bretfisher.com/podcast Music ===== Yellowbase by Chelsea Harbour https://www.epidemicsound.com/track/A... #devsecops #devops #kubernetes 00:00 Kyverno Intro 01:25 Introductions 02:14 Nirmata's focus 03:21 What is policy management? 06:21 What's in scope for Kyverno? 06:37 Kyverno Architecture 09:43 Kyverno Demo 15:55 What things aren't covered? 17:36 What will be enhanced in the future? 20:31 Demo blocking exec commands 21:02 Nirmata and Kyverno 22:07 Nirmata Demo 24:40 What does the adoption look like? 25:16 Nirmata Onboarding Demo 27:01 Open source or SaaS first? 28:06 What's the future of Nirmata? 33:34 Where to look besides Nirmata? 34:33 Demo about sigstore 40:33 Questions 40:37 Question: Calico network policies 42:20 Question: Start with Kyverno? 45:35 Question: Likely to be merged into Kubernetes? 46:32 Question 49:30 Winding down the show 50:46 Where to go next?