Learn how to easily manage policy results across admission controls, runtime, and vulnerability
Policies help secure and automate Kubernetes. To standardize and simplify the management of policy reports across multiple tools, the Kubernetes Policy WG created a reusable PolicyReport Custom Resource Definition (CRD).
In this session, Anushka, Mritunjay, and Stephen who are all LFX mentorship graduates were discussing the PolicyReport CRD and demonstrating adapters for policy and verification engines like Falco, kube-bench, KubeArmor, Kyverno, and Trivy to produce standardized policy reports. You’ll learn about the Policy Reporter, a Web UI with dashboards for policy reporting and integrations with Slack, Discord, Grafana, Teams, and Elasticsearch. Plus, you will see how to easily manage policy results across admission controls, runtime, and vulnerability scanning leveraging the powerful CRD capabilities of Kubernetes.
Speakers: Mritunjay Sharma (HackerRank), Anushka Mittal (Ramaiah Institute of Technology), Frank Jogeleit (Lovoo GmbH) and Stephen Adeniyi (Kubermatic)