Kubernetes
SOC 2 controls for Kubernetes you can automate
Kubernetes policy can automate SOC 2 checks on privileged pods, Secrets, RBAC, service account tokens and images. It can't cover access reviews or approvals.
4 min read
Category
Kyverno
117 posts
Kubernetes
Which PCI DSS requirements can Kubernetes policy enforce?
Kubernetes policy enforces the PCI DSS v4.0.1 rules on privileged pods, secrets, RBAC and image sources. It can't enforce logging, anti-malware or scope.
6 min read
Kyverno
Kyverno 1.19.2 Security Release: 26 Advisories Fixed
What the 26 advisories in Kyverno 1.19.2 mean for your clusters: tenant escapes to cluster admin, image verification bypasses, checks to run, how to upgrade.
8 min read
AI
Who Controls Your AI Agents? Jim Bugwadia on Policy as Code for AI Governance
Jim Bugwadia explains how to govern AI agents with policy as code: decouple rules from apps, enforce every LLM, MCP and agent call, and keep developers moving.
4 min read
Kyverno
How to Secure VMware vSphere Kubernetes Service (VKS) with Kyverno
Secure VMware VKS clusters with Kyverno: enforce Pod Security Standards, RBAC and image signing at admission, deploy policies with Argo CD, scan for drift.
3 min read
Kyverno
How Razorpay Automates RBI Compliance on Kubernetes with Kyverno
Razorpay meets RBI Payment Aggregator rules on 7,000+ Kubernetes nodes with Kyverno policy as code: checks in CI, at admission and in scans, with live evidence.
5 min read
Kyverno
How Chase UK Made Kubernetes Audit-Ready with Kyverno Policy as Code
Chase UK replaced manual Kubernetes audits with Kyverno: 46 policies on 50 clusters, one Grafana compliance dashboard, under 20 ms admission latency.
6 min read
Kyverno
Kyverno Runs Your Admission Control. Is It Actually Hardened?
To harden Kyverno, make its webhooks fail closed, enforce image verification, sign policy bundles and lock down policy RBAC. Start with the new hardening guide.
7 min read
Kubernetes
Introducing OttoFlow: AI Workflows for Kubernetes
AI workflows for Kubernetes, without handing an agent your kubeconfig. OttoFlow makes a workflow a custom resource: typed DAG steps, AI only where it counts.
6 min read
AI
Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads
Nirmata created Kyverno and donated it to the CNCF in 2020. Kyverno is now a graduated CNCF project and is widely used for enforcing and automating configuration security…
7 min read
AI
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
6 min read
Engineering
The AI Innovation-Security Paradox
Nirmata's AI Controls provides real-time governance, policy enforcement and risk management, bridging the gap between engineering and security leaders.
4 min read