Articles tagged with "admission-control"
MutatingAdmissionPolicy reached GA in Kubernetes v1.36. For teams running a hand-rolled Mutating Webhook for labels or sidecar injection, how far can you replace it with CEL, and where should a webhook stay? Here's the decision framework for K3s operations.
As Kyverno's ClusterPolicy heads toward deprecation, teams migrating to ValidatingAdmissionPolicy (CEL) have found that validation silently skipped for certain resource types. Here's the CEL runtime error and failurePolicy trap behind it, and a safe migration path.
Which should you choose for K3s production, Kyverno or OPA Gatekeeper? We break down the real-world gap: wildcard policy overhead and measured p99 latency across replica configurations.
You've adopted SAST, DAST, and container scanning — yet incidents still slip into production. This article reframes CI/CD pipeline security as a four-layer design problem and walks through concrete implementation patterns for K3s/Kubernetes environments.
Shadow AI isn't just unauthorized SaaS tools. It's happening inside your Kubernetes clusters too. Here's the risk it creates, and how Admission Control turns detection into real governance.