kyverno.io

Configure Kyverno verifyImages to enforce cosign keyless signature policy on Kubernetes pods

Write a Kyverno ClusterPolicy to enforce that all Deployments set resource requests and limits

Author a Kyverno ClusterPolicy with mutate rules to inject resource limits and requests on pods that omit them, and validate the policy with Kyverno CLI test cases

Configure admission-controller image-signature verification using Kyverno or an equivalent controller

Write a Kyverno policy to validate, mutate, and generate resources, and review policy reports

Write a Kyverno ClusterPolicy using verifyImages to enforce that all pods in a namespace use only images signed with a keyless cosign signature from a trusted GitHub Actions workflow

Create a Kyverno mutate policy to add a default resource limits sidecar annotation to Deployments

Create a Kyverno PolicyException to exempt a workload from a policy

Create a Kyverno ClusterPolicy to generate default resources when a namespace is created

Create a Kyverno PolicyException to exempt specific workloads from a policy rule

Write a Kyverno mutate policy to inject a sidecar container into Deployments