ValidatingAdmissionPolicy reached GA in Kubernetes 1.30 and gives you built-in cluster policy enforcement using CEL expressions inside the API server itself. No webhooks, no OPA, no Kyverno needed for the common cases. Here is how it works and when to use it.
A practical guide to hardening Kubernetes clusters using CIS benchmarks, Pod Security Standards, RBAC best practices, etcd encryption, and automated scanning with kube-bench and Kubescape.
Policy as Code lets you define and enforce infrastructure rules the same way you write application code. Here's how OPA and Kyverno work, when to use each, and how to implement guardrails that actually stick.
Practical deep dives on infrastructure, security, and scaling. No spam, no fluff.
By subscribing, you agree to receive emails. Unsubscribe anytime.