With the cloud-native paradigm shift towards everything-as-code, Kubernetes policies are no exception. Kyverno, a policy engine for Kubernetes, offers low-code declarative policies. In its CNCF incubation status, Kyverno is actively deployed in production environments across various organizations. The tutorial extends beyond fundamentals, exploring real-world applications and offering hands-on exercises mimicking production workflows.

In this session, Anusha, Raúl, and Anushka provide both end-user and contributor perspectives on Kyverno for policy-as-code workflows. They will guide the audience to set up a CI pipeline using the Kyverno CLI, which is a crucial first step in any DevOps pipeline. Following this, they will demonstrate the creation of policies for RBAC, resource protection, and other Day 1 operations. Finally, they will explore some of the advanced use cases like time-bound policy exceptions, and periodic pod restarts which come in handy during Day 2 operations.