The State of Kubernetes Policy and Governance

September, 2023

enterprise@2x (1)-Mar-09-2023-11-06-39-5904-AM

Hello, from all of us at Nirmata!

We bring you our exclusive September newsletter with the latest insights, news, and updates on Kubernetes, cloud-native security, compliance and governance from across the industry. From Kubernetes security, compliance, Policy as Code, to pipelines and supply chain security, we cover it all. Please feel free to reach-out to us to share your feedback or say hello!

Screenshot 2023-09-26 at 5.05.22 PM copy

Mastering Kubernetes Policy management with Kyverno: Ensuring Secure DevOps

Livestream hosted by Vishwas Narayan where Anusha Hegde and Kumar Mallikarjuna delved deep into the realm of Kubernetes policy management with Kyverno and discussed new features added in Kyverno 1.10/1.11.

Recent Blogs

How it works: Kubernetes Policy Management with Nirmata Policy Manager

Recent Videos

This video provides an Overview of the Nirmata Policy Manager. It shows how your Kubernetes clusters can be onboarded. It also provides an overview of policy violations reporting and #compliance standards.

Recent Events

Shuting Zhao from Nirmata and Feynman Zhou from Microsoft participated in KubeCon + CloudNativeCon + Open Source Summit China 2023 where they talked about Kicking Security Chain Attacks to the Curb with Kyverno and Notary in GitOps.

Jim Bugwadia, CEO and Co-founder of Nirmata participated in the Matrix competition at #MIMSummit2023.
Shuting Zhao from Nirmata team participated in #KubeCon + #CloudNativeCon + #OSSummit China, where she talked about Kyverno Playground. More details here.

Upcoming Events

Nirmata- Office Hours for Kyverno

An interactive session and livestream hosted by the team at Nirmata, the creators of Kyverno, where we discuss all things Kubernetes policy and governance! Office hours occur on the second Thursday of every month at 10 am EST / 7 am PST. Join the Google group here to receive a calendar invite with meeting details. The 7th session in the series demonstrated AWS Notation extension. Watch all the videos here.

Meetup

An in-person meetup has been planned on 14th Oct, 2023 which will cover the Kubernetes Security: Preventive action with Shift-Left approaches. More details here.

Securing Cloud-Native Workloads: A Deep Dive Into Achieving Zero-Trust

Through Effective Policies On AWS

Aradhna Chetal, Jim Bugwadia, Randi Belz and Riccardo Freschi will discuss the key elements of zero-trust, emphasizing the role of well-defined policies in bolstering security. RSVP here.

Download Free ebook

Learn all about Kubernetes platform engineering, policy management, policy types, policy-as-code and much more in this free ebook.

From the Kyverno Community

Kyverno Blogs

By leveraging Kyverno and IRSA, simplify the configuration of IAM role assumptions for Kubernetes service accounts in EKS- by Shuting Zhao.
Applying Kubernetes Validating Admission Policies using Kyverno CLI - by Mariam Fahmy.
Enforce Kubernetes Security with Kyverno- by knv sai.

From the Community

Release of Kyverno Playground v0.3.4 with new features and fixes like:
- Support for ProtectManagedResources and ForceFailurePolicyIgnore toggles.
- Fake image data support.
- More flags support to customize the Kyverno features set.
  Details here.
Kyverno completes fuzzing security audit.

Community Engagement

We love hearing from you!

Are you already using Kyverno or planning to use Kyverno for security, governance and compliance of your Kubernetes environments? Are you looking to solve complex problems such as multi-tenancy, software supply chain security or developer self-service? Contact us to learn how we can help.