The State of Kubernetes Policy and Governance

July, 2023

Hello, from all of us at Nirmata!

We bring you our exclusive July newsletter with the latest insights, news, and updates on Kubernetes, cloud-native security, compliance and governance from across the industry. From Kubernetes security, compliance, Policy as Code, to pipelines and supply chain security, we cover it all. Please feel free to reach-out to us to share your feedback or say hello!

Policy Management made Easy using the Enterprise Kyverno Operator

Enterprise Kyverno Operator simplifies the management of a Kyverno deployment, including its policies and data adapters. Additionally, the Operator functions as a “control plane” for all policy and governance requirements in the cluster, providing Kubernetes-native installation, update, and deletion of components. This is just the initial release for the Operator. Soon it will be able to perform complex Day 2 operations, such as upgrading Kyverno, backup and restore of policies with minimal human intervention. Explore a complete Kubernetes policy and governance solution at: https://try.nirmata.io.

Recent Blogs

• An AWS workshop on the CNCF Secure Software Factory reference architecture to secure the software supply chain.

• Experimental Generic JSON Validation with Kyverno

• Strengthening Governance and Security in Financial Institutions with Policy as Code and Kyverno

Recent Events

• Meetup by Nirmata on Kubernetes Governance Essentials: Policy Matters

We had a Kubernetes Governance Essentials: Policy Matters Bangalore Meetup session on July 8, that provided some valuable insights into Kubernetes, policies, Kyverno, security, compliance and much more. 

Session 1: Kyverno - CNCF Policy Engine for Kubernetes Governance
Anusha Hegde

Session 2: Policy based Security in Kubernetes: Use Cases
Ravi Mishra

Session 3: Cloud-native DevSecOps: Achieving Continuous Compliance
Govindarajan Vishnuchithan

Session 4: Open Source Supply Chain Security
Harimohan Rajamohanan

You can join the Kyverno community here. 

• Kubernetes Community Days Bengaluru

  Kubernetes Community Days Bengaluru is a community-organized event that includes conference and workshop events, to gather adopters and technologists from leading open-source and cloud-native communities. The conference event is supported by the CNCF. Our team members participated in the event and presented on policy-based infrastructure as code with Kyverno. Watch the video here or refer to the presentation deck.

   

  Our team member Anusha Hegde also joined their panel discussion on "Platform and Developer Productivity- Trends and Challenges". You can watch this discussion here. 

Download free ebook

Learn all about Kubernetes platform engineering, policy management, policy types, policy-as-code and much more in this free ebook. 

From the Kyverno Community

Kyverno Blogs

• Unlocking Kubernetes Security and Compliance with Kyverno: A Distributed Cloud Technology to Consider
• Using Kyverno with Pod Security Admission
• A step-by-step migration guide for getting off PSP and onto Kyverno so you can feel confident in your ability to upgrade safely.

From the Community

• Selvam Raju explains the installation steps of Kyverno and enables users to take advantage of its powerful policy enforcement capabilities.
• PodSecurity Policy Migration with Kyverno.
• Matthieu Vincent explains how to Keep your cluster under control with Kyverno

Community Engagement

• 4.1k stars for Kyverno.
• Almost 2.2 Billion image pulls for Kyverno.
• Patch release of 1.10.

We love hearing from you!

Are you already using Kyverno or planning to use Kyverno for security, governance and compliance of your Kubernetes environments? Are you looking to solve complex problems such as multi-tenancy, software supply chain security or developer self-service?  Contact us to learn how we can help.