Automating EKS CIS Compliance with Kyverno and KubeBench
A practical approach to implementing CIS security controls using CNCF cloud native tools.
General
21 posts with the tag “General”
Kyverno-Envoy-Plugin - Kyverno policies based authorization plugin for Envoy
Make external authorization easy with Kyverno-Envoy-Plugin.
Kyverno Reports Server - The ultimate solution to scale reporting
Security or Scalability? Why not both!
Generating Kubernetes ValidatingAdmissionPolicies from Kyverno Policies
Generating Kubernetes ValidatingAdmissionPolicies from Kyverno Policies
Assigning Node Metadata to Pods
How to assign Node metadata like labels and annotations to Pods.
Kyverno Chainsaw 0.1.4 - Awesome new features!
What’s new in chainsaw v0.1.4!
Securing Services Meshes Easier with Kyverno
Providing better Pod security for service meshes with Kyverno.
Kyverno Chainsaw - Exploring the Power of Assertion Trees!
The Chainsaw Secret Sauce!
Kyverno Chainsaw - The ultimate end to end testing tool!
Have fun testing Kubernetes operators!
Kyverno Completes Third-Party Security Audit
Presenting the results from the Kyverno security audit
Using CEL Expressions in Kyverno Policies
Using CEL Expressions in Kyverno Policies
Applying Validating Admission Policies using Kyverno CLI
Using Kyverno CLI to apply Validating Admission Policies
Verifying images in a private Amazon ECR with Kyverno and IAM Roles for Service Accounts (IRSA)
Using Kyverno to verify images with IRSA
Simplifying OpenShift MachineSet Management Using Kyverno
Using Kyverno to mutate OpenShift MachineSet resources for easier automation.
Using Kyverno with Pod Security Admission
Using Pod Security Admission with Kyverno for the best of both worlds.
Let's Play Kyverno
Away with the hurdles. How to get started with a Kubernetes Native Tool without an actual Kubernetes cluster?
PodSecurityPolicy migration with Kyverno
Migrating from PodSecurityPolicy to Kyverno
New time related JMESPath filters in Kyverno!
Use time in your filters now!.
Kyverno and SLSA 3
How the Kyverno project believes it is meeting SLSA Level 3 requirements.
Kyverno CVE-2022-47633 affecting image verification
CVE disclosure allowing bypass of verified images.
New Kyverno Blog
Announcing the new Kyverno blog.