Anubhav Bhatt·3d agoDevOps Concepts 07/25 — Kyverno with ArgoCD: Enforcing Kubernetes Policies AutomaticallyThis is Article 07 of 25 in the DevOps Concepts Series (Part 2 of 6: GitOps and Platform Engineering). GitOps decides how manifests reach…A response icon1A response icon1
Pooja Bolla·6d agoSoftware Supply Chain Security on Kubernetes, Part 3: Enforcing Signatures and SBOM Attestations…How I got the cluster to refuse unsigned or unscanned images with one Kyverno policy, the attacks it stopped in my lab, and the failure…
Mr__Scalpel·Oct 28Building the Safe Blast Radius: Guardrails for Autonomous Infrastructure AgentsHow to let AI agents investigate and propose infrastructure changes without turning them into unreviewed production administrators
Mykhailo·Oct 18Two questions that answer most of the Kyverno KCA examDoes this run on the request path or off it? Does it block, or only report? Almost every question I got on the Kyverno Certified Associate…
InDevOps.devbyHoussem Kraoua·Oct 6Kubernetes knows who can change production. It doesn’t know when nobody should.Monday, 9am. First coffee. First Slack message of the week: “Who changed prod this weekend?”
HIDOURI Bellkis·Oct 5Supply-Chain — Container Image Signing on AKS with Cosign and KyvernoWhy sign images at all
Gyasmine·Sep 29Kyverno beyond security: Guardrails, Paved Roads, Scaffolding, and TrustBuilding a local platform with CEL policies, ArgoCD, and Cilium, tested end to end in CI on vCluster
When It Runs·Sep 26When a Kyverno Wildcard Guardrail Runs Past a Post-Policy CRD Until a Restartkinds: [“*/*”] + operations: [DELETE] on Kyverno v1.19.1 (crdWatcher on): “no policies matched admission request” for a post-policy CRD’s…
Narendhiran B·Sep 11Building Defence in Depth: CI Security, Runtime Detection, and Network PoliciesHow we approached security as a set of practical engineering boundaries across delivery, Kubernetes admission, runtime behaviour, and…
Narendhiran B·Sep 8Building Astronomy Shop Before Our First Platform Engineering RolesHow two early-career engineers turned self-directed learning into a hands-on cloud-native AWS platform engineering project
