Search

Lessons (2)

• Extending Kubernetes: CRDs, Operators and Admission

  … an admission webhook , or use a policy engine: - Kyverno : policies written as YAML; can validate, mutate and generate …

• RBAC and Cluster Security

  … Sign images (cosign) and verify at admission with Kyverno or a policy engine. - Use minimal base images (distroless …