runtime-deployment-admission-control-with-kyverno

What problem does it solve?

Runtime policy enforcement in Kubernetes requires a robust safety net to prevent non-compliant resources from reaching production. This skill deploys Kyverno admission webhooks, a policy reporter, and continuous background scans to ensure ongoing governance at runtime.

Core Features & Use Cases

• Deploy Kyverno admission controllers (validating and mutating webhooks) to enforce policies on API requests.
• Install a policy reporter to visualize compliance metrics and alert on violations.
• Enable background scans to continuously re-evaluate resources and maintain compliance across environments.
• Use Case: automatically block deployments that violate resource limits or other policy rules to keep clusters compliant.

Quick Start

Install Kyverno in your cluster with Helm, install the policy reporter, apply kyverno-values.yaml and policy-reporter-values.yaml, and apply example policies to start runtime enforcement.