Navigating Kubernetes Policies with Kyverno 🚀

Join us for our first Kyverno-dedicated meetup before the summer break 🌴

We want to thank Schwarz Digits Spain for kindly hosting us for this evening of learning and networking!

🧭 What is Kyverno?

Kyverno is a CNCF-graduated, Kubernetes-native policy engine. Unlike other tools that require learning a new programming language, Kyverno allows you to manage cluster governance, security, and compliance using familiar Kubernetes manifests. With zero coding required, you can easily:

• Validate: Block non-compliant resources before they hit your cluster.
• Mutate: Automatically inject sidecars, labels, or configurations on the fly.
• Generate: Automatically create new resources (such as NetworkPolicies or ConfigMaps) when a new namespace is provisioned.

📅 Agenda

• 18:30-18:45. Doors Open.
• 18:45-19:45. Talks (see below).
• 19:45-20:30. Mingling and food.

📍Location:
c/ Bergara 13, Barcelona | https://maps.app.goo.gl/zd6h3BGzHNxgAgjT6

🎙️ Talks

1️⃣ Full Observability for Kyverno with Observability-as-Code, Imma Valls - Staff Developer Advocate at Grafana Labs (Talk in English 🇬🇧)
Adopting Kyverno solves the challenge of Policy-as-Code. However, a new question emerges for platform engineers: what happens when a slow policy rule adds latency? A slow admission webhook can degrade performance across the k8s cluster.
Tracing the webhook’s lifecycle is the fastest way to pinpoint any bottlenecking rule.
The next step in your GitOps journey is to make your monitoring as declarative as your policies. In the live demo, you’ll learn how to monitor Kyverno’s operational cycle using Prometheus, Tempo, and Grafana.

2️⃣ Kyvernos más allá de la validación: automatización con mutación y generación de recursos, Javier Dompablo - Expert Platform Engineer and Product Security en Schwarz Digits (Talk in Spanish 🇪🇸)
En esta sesión exploraremos dos de las capacidades más potentes de Kyverno: la mutación y la generación de recursos. Veremos cómo automatizar las configuraciones, aplicar de forma transparente los estándares de la plataforma a los equipos de desarrollo y reducir la carga operativa mediante la creación y la modificación automáticas de recursos en Kubernetes. A través de ejemplos prácticos, descubriremos cómo implementar políticas que mejoran la consistencia, la seguridad y la gobernanza de los clústeres sin necesidad de modificar las aplicaciones.

See you there 👋