Replacing PSPs - Keep Bad Pods out of Your Cluster Using Kyverno

This talk demonstrates how Kyverno can replace deprecated PodSecurityPolicy controls with policies based on Pod Security Standards. It covers auditing existing clusters, generating policy reports, enforcing Pod security, and adding default security contexts to Pods.

Syllabus

Introduction
Pod Security
PSP Security Emission
PSP Security Recommendations
Why use Kyverno
Kyverno Policy Library
Kyverno Validation Policy
Kyverno Autogen
Kyverno Enforce Policy
Kyverno Policy Report
Grandfather Dashboard
Mutate Policy
Conclusion