Kyverno

Remediator Agent for Kubernetes – AI-Powered Policy Remediation

Kubernetes gives teams incredible power and flexibility—but it’s also noisy. Every day, platform and security teams encounter a flood of policy violations, including missing resource limits, insecure container settings, deprecated APIs, and more.  Fixing them typically means opening a ticket, chasing down the right developer,…

0

Kyverno vs Kubernetes Policies: How Kyverno Complements and Completes Kubernetes Policy Types

Do You Still Need Kyverno with the new Kubernetes Policy Types? With the addition of ValidatingAdmissionPolicy and MutatingAdmissionPolicy in Kubernetes, do you still need Kyverno? TL;DR: Yes, you still need Kyverno for applying policies on existing resources, complex logic, reporting, testing, and off-cluster / shift-left…

0

Policy-Driven Storage Governance: How Nirmata is Helping Secure Rakuten Cloud Products

Co-Author & Guest Contributor: Sadeek Mohammad (Rakuten Cloud)   Introduction In today’s cloud-native world, managing storage effectively in Kubernetes environments is crucial for security, compliance, and operational efficiency. Rakuten Cloud and Nirmata are partnering to bring policy-based governance to Rakuten Cloud-Native Platform and Rakuten Cloud-Native...
0

Policy as Code: The Essential Strategy for Securing AI Workloads in Kubernetes  

The rise of AI is transforming industries, but it’s also introducing unprecedented complexity. As organizations deploy more AI models—LLMs, recommendation engines, real-time analytics—the attack surface expands, compliance risks multiply, and resource contention intensifies. For platform engineers and AI infrastructure teams, the stakes have never been…

0

Namespace-as-a-service: Self-service Kubernetes Deployments via GitOps

Introduction  Organizations are increasingly adopting Kubernetes, and efficiently segregating resources, managing privileges, and ensuring isolation between teams or projects becomes critical. Multi-tenancy offers a solution by enabling multiple teams to share a single Kubernetes cluster, with each team or project receiving a dedicated namespace. This…

0