Kyverno Explained: Why Modern Platforms Need Policy-as-Code
Running pods as root. Deploying images with the latest tag everywhere, unpinned, unsigned, and not traced to a digest. Relying on a Bash script to bootstrap new namespaces with default NetworkPolicies
todea.hashnode.dev7 min read