AI
How to find MCP servers in your codebase and clusters
Find MCP servers in repos with .mcp.json and claude mcp list, then in clusters by listing pods and images. Covers scopes, approvals and shadow servers.
6 min read
Blog
463 posts
Kubernetes
SOC 2 controls for Kubernetes you can automate
Kubernetes policy can automate SOC 2 checks on privileged pods, Secrets, RBAC, service account tokens and images. It can't cover access reviews or approvals.
4 min read
AI
How to route Claude Code through an AI gateway
Point Claude Code at an AI gateway with ANTHROPIC_BASE_URL and a gateway credential, verify it with curl and /status, then roll it out with managed settings.
6 min read
AI
How to control MCP servers in GitHub Copilot
Control MCP servers in GitHub Copilot with the MCP policy, registry-only mode, managed-settings allowlists and cloud agent settings. See where each one applies.
5 min read
Kubernetes
Which PCI DSS requirements can Kubernetes policy enforce?
Kubernetes policy enforces the PCI DSS v4.0.1 rules on privileged pods, secrets, RBAC and image sources. It can't enforce logging, anti-malware or scope.
6 min read
AI
How to restrict which MCP servers Claude Code can use
Restrict Claude Code MCP servers with managed-mcp.json, allowedMcpServers and deniedMcpServers. Learn the match rules, the deny-first order and the gaps.
6 min read
AI
How to block destructive commands in Claude Code
Block rm -rf and other destructive Claude Code commands with Bash deny rules, a PreToolUse hook and managed settings. Learn where each layer stops and fails.
5 min read
Kyverno
Kyverno 1.19.2 Security Release: 26 Advisories Fixed
What the 26 advisories in Kyverno 1.19.2 mean for your clusters: tenant escapes to cluster admin, image verification bypasses, checks to run, how to upgrade.
8 min read
AI
Who Controls Your AI Agents? Jim Bugwadia on Policy as Code for AI Governance
Jim Bugwadia explains how to govern AI agents with policy as code: decouple rules from apps, enforce every LLM, MCP and agent call, and keep developers moving.
4 min read
Kyverno
How to Secure VMware vSphere Kubernetes Service (VKS) with Kyverno
Secure VMware VKS clusters with Kyverno: enforce Pod Security Standards, RBAC and image signing at admission, deploy policies with Argo CD, scan for drift.
3 min read
Stay up-to-date with the latest in AI, governance, and infrastructure
Subscribe to our free monthly newsletter to get industry news, DevOps tips, and articles right to your inbox on Kyverno, containerization, Kubernetes deployment & management and more.