Have you ever been frustrated during a maintenance window because a developer deployed a PodDisruptionBudget alongside a single-replica Deployment? Have you debugged application issues for hours, only to find that a latest image tag caused a hidden change in your environment?

While Kubernetes offers great scalability and velocity, it introduces significant operational challenges. Fortunately, these can be tackled with robust Admission Control policies.

We will explore different Dynamic Admission Controllers, specifically Kyverno and OPA Gatekeeper, to see how they handle these common pitfalls. Additionally, we will compare these established tools with the recently stabilized ValidatingAdmissionPolicy in Kubernetes 1.30. This session will help you understand whether to rely on external controllers or embrace the new native features to secure your infrastructure.