Shift Left in Action - Automating CIS Compliance With Kyverno and CNCF Power Tools

Learn how to implement true shift-left security by building a comprehensive CIS compliance automation framework using CNCF-native tools in this 25-minute conference talk. Discover how to leverage Kyverno as a policy orchestrator alongside kube-bench and OpenTofu to create full-spectrum validation that catches compliance issues before they reach production. Explore the implementation of CEL-based ValidatingPolicies that enable unified plan-time and runtime security checks across your infrastructure. Master the integration of OpenTofu for automated Infrastructure as Code scanning and understand how kube-bench provides crucial node-level audits to complete the compliance loop. Watch live demonstrations showing how this framework effectively enforces CIS benchmarks across major cloud platforms including EKS, AKS, and GKE, proving that early and automated security validation can truly scale in cloud-native environments.