Events
KubeCon + CloudNativeCon North America 2026 Recap
Our KubeCon + CloudNativeCon North America 2026 recap: AT&T and Kinexys by J.P. Morgan on Kyverno in production, the move to CEL and policy for AI agents.
6 min read
Tag
Kyverno
127 posts
Kyverno
What's new in Kyverno 1.20
Kyverno 1.20 makes CEL the only policy engine and retires ClusterPolicy. See what changes for image verification, the CLI, exceptions and your upgrade.
7 min read
AI
Admission control vs runtime enforcement for AI agents
An agent's pods face admission control before they start. Its calls face runtime enforcement after. Here is where each one stops it, and where it doesn't.
5 min read
Kyverno
Kyverno policies for AI agents
Kyverno policies for AI agents: enforce Pod Security Restricted controls on agent pods at admission with a ValidatingPolicy, then test the policy with the CLI.
6 min read
Kyverno
Kyverno 1.19.2 Security Release: 26 Advisories Fixed
What the 26 advisories in Kyverno 1.19.2 mean for your clusters: tenant escapes to cluster admin, image verification bypasses, checks to run, how to upgrade.
8 min read
Kubernetes
OpenShell on Kubernetes: A Guide for Platform Engineers
What OpenShell is AI agents do more than call APIs. They run shells, install packages, read files, and open network connections. Often they act on text they pulled from…
13 min read
Kubernetes
Introducing OttoFlow: AI Workflows for Kubernetes
AI workflows for Kubernetes, without handing an agent your kubeconfig. OttoFlow makes a workflow a custom resource: typed DAG steps, AI only where it counts.
6 min read
AI
Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads
Nirmata created Kyverno and donated it to the CNCF in 2020. Kyverno is now a graduated CNCF project and is widely used for enforcing and automating configuration security…
7 min read
AI
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
6 min read
Engineering
The AI Innovation-Security Paradox
Nirmata's AI Controls provides real-time governance, policy enforcement and risk management, bridging the gap between engineering and security leaders.
4 min read
Engineering
Critical Kyverno Vulnerability — CVE-2026-54523
CVE-2026-54523 (CVSS 9.6) lets a Kyverno NamespacedMutatingPolicy create resources in any namespace. Kyverno 1.18.0 and 1.18.1 are affected; upgrade to 1.18.2.
3 min read
AI
Kyverno Policy: Migration to CEL Based Policies
Quick question: the last time a Kyverno policy rejected a resource, did the error actually tell you why — or did you spend twenty minutes squinting at a pattern block…
6 min read