With the cloud-native paradigm shift towards everything-as-code, Kubernetes policies are no exception. Kyverno, a policy engine for Kubernetes, offers low-code declarative policies. In its CNCF incubation status, Kyverno is actively deployed in production environments across various organizations. The tutorial extends beyond fundamentals, exploring real-world applications and offering hands-on exercises mimicking production workflows.

In this session I will provide end-user perspectives on Kyverno for policy-as-code workflows and guide the audience through examples which are used at DE-CIX for RBAC, resource protection and Day 1 operations.