Kyverno
Kyverno 1.19.2 Security Release: 26 Advisories Fixed
What the 26 advisories in Kyverno 1.19.2 mean for your clusters: tenant escapes to cluster admin, image verification bypasses, checks to run, how to upgrade.
8 min read
Tag
Policy Management
50 posts
AI
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
6 min read
Engineering
The AI Innovation-Security Paradox
Nirmata's AI Controls provides real-time governance, policy enforcement and risk management, bridging the gap between engineering and security leaders.
4 min read
Engineering
Critical Kyverno Vulnerability — CVE-2026-54523
CVE-2026-54523 (CVSS 9.6) lets a Kyverno NamespacedMutatingPolicy create resources in any namespace. Kyverno 1.18.0 and 1.18.1 are affected; upgrade to 1.18.2.
3 min read
AI
Kyverno Policy: Migration to CEL Based Policies
Quick question: the last time a Kyverno policy rejected a resource, did the error actually tell you why — or did you spend twenty minutes squinting at a pattern block…
6 min read
Engineering
Unified Policy Enforcement for AWS CDK with Nirmata
AWS CDK: Bringing Flexibility to Cloud Infrastructure The AWS Cloud Development Kit (CDK) is an open-source framework that enables developers to define cloud…
5 min read
Kyverno
A Proactive Approach to Address Windows Vulnerability (CVE-2023-5528) with Kyverno
Introduction Recently, Akamai's Tomer Peled announced a security threat to Kubernetes clusters, CVE-2023-5528. A user who can create pods and persistent volumes on…
1 min read
Engineering
What is Kubernetes Validating Admission Policy?
Kubernetes is designed for extensibility and allows several types of policies to be configured. In this post, we introduce the four types of policies available in…
4 min read
Engineering
The 4 Types of Kubernetes Policies
Kubernetes is designed for extensibility and allows several types of policies to be configured. In this post, we introduce the four types of policies available in…
4 min read
Business
Kubernetes FinOps: A Platform Engineer’s Perspective
Enterprises struggle to balance rapid adoption with budgets and security considerations. Nirmata's blog post describes how FinOps can control costs, from a platform…
5 min read
Business
Can ChatGPT be used to write Kyverno policies?
Nirmata explores whether natural language processing tools such as ChatGPT can be used to write Kyverno policies. Read the post here!
5 min read
Product
Nirmata Control Hub Empowers Platform Engineering Teams To Deliver Secure and Compliant Kubernetes Governance
Nirmata Control Hub is a powerful solution that helps platform engineers with security, compliance, governance, and self-service automation for Kubernetes management.
3 min read