What are the most popular Kubernetes configuration linting tools and what do they do? Which ones are configured using JSON / YAML and which ones use DSLs such as Rego? Do you know of some good tools that I didn't include?
itnext.io/kubernetes-c...
#kubernetes #infrastructureascode #policyascode
itnext.io/kubernetes-c...
#kubernetes #infrastructureascode #policyascode
Kubernetes configuration linting tools
Categorization of the most popular Kubernetes configuration linting tools, with a few examples.
medium.com
December 3, 2024 at 6:54 PM
What are the most popular Kubernetes configuration linting tools and what do they do? Which ones are configured using JSON / YAML and which ones use DSLs such as Rego? Do you know of some good tools that I didn't include?
itnext.io/kubernetes-c...
#kubernetes #infrastructureascode #policyascode
itnext.io/kubernetes-c...
#kubernetes #infrastructureascode #policyascode
Why we're betting on a code-first approach to privacy.
Your policy should live in your codebase, update in the same PR, and have a full git audit trail — just like everything else you ship.
#Privacy #OpenSource #PolicyAsCode #DeveloperTools #BuildInPublic
Your policy should live in your codebase, update in the same PR, and have a full git audit trail — just like everything else you ship.
#Privacy #OpenSource #PolicyAsCode #DeveloperTools #BuildInPublic
March 26, 2026 at 12:58 PM
Why we're betting on a code-first approach to privacy.
Your policy should live in your codebase, update in the same PR, and have a full git audit trail — just like everything else you ship.
#Privacy #OpenSource #PolicyAsCode #DeveloperTools #BuildInPublic
Your policy should live in your codebase, update in the same PR, and have a full git audit trail — just like everything else you ship.
#Privacy #OpenSource #PolicyAsCode #DeveloperTools #BuildInPublic
CEL-expr-python – the Common Expression Language (CEL) in #Python is now #opensource!
CEL is a non-Turing complete embedded policy and expression language built for simplicity, speed, safety, and portability.
Learn more on #InfoQ ⇨ bit.ly/4sTRqDG
#SoftwareDevelopment #Google #PolicyAsCode
CEL is a non-Turing complete embedded policy and expression language built for simplicity, speed, safety, and portability.
Learn more on #InfoQ ⇨ bit.ly/4sTRqDG
#SoftwareDevelopment #Google #PolicyAsCode
March 23, 2026 at 8:20 AM
CEL-expr-python – the Common Expression Language (CEL) in #Python is now #opensource!
CEL is a non-Turing complete embedded policy and expression language built for simplicity, speed, safety, and portability.
Learn more on #InfoQ ⇨ bit.ly/4sTRqDG
#SoftwareDevelopment #Google #PolicyAsCode
CEL is a non-Turing complete embedded policy and expression language built for simplicity, speed, safety, and portability.
Learn more on #InfoQ ⇨ bit.ly/4sTRqDG
#SoftwareDevelopment #Google #PolicyAsCode
#ShiftDown is a new term compared with #ShiftLeft for #ComputerSecurity but I couldn’t agree more wrt proposed PolicyAsCode and moving more towards platform support! #Kubernetes #K8s
github.com
March 2, 2025 at 3:14 AM
#ShiftDown is a new term compared with #ShiftLeft for #ComputerSecurity but I couldn’t agree more wrt proposed PolicyAsCode and moving more towards platform support! #Kubernetes #K8s
While #DockerExtensions boost developer speed, they can create a “visibility gap” by isolating telemetry. Extensions should act as bridges to centralized platforms!
Use:
🔹 #OpenTelemetry
🔹 #PolicyAsCode
🔹 #Encryption
...to build secure pipelines.
📰 Read now: bit.ly/4cqKKb7
#InfoQ #Docker
Use:
🔹 #OpenTelemetry
🔹 #PolicyAsCode
🔹 #Encryption
...to build secure pipelines.
📰 Read now: bit.ly/4cqKKb7
#InfoQ #Docker
April 17, 2026 at 12:42 PM
While #DockerExtensions boost developer speed, they can create a “visibility gap” by isolating telemetry. Extensions should act as bridges to centralized platforms!
Use:
🔹 #OpenTelemetry
🔹 #PolicyAsCode
🔹 #Encryption
...to build secure pipelines.
📰 Read now: bit.ly/4cqKKb7
#InfoQ #Docker
Use:
🔹 #OpenTelemetry
🔹 #PolicyAsCode
🔹 #Encryption
...to build secure pipelines.
📰 Read now: bit.ly/4cqKKb7
#InfoQ #Docker
KyvernoCon is here! 🎉
An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025.
Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes.
🛠️ Join us → www.cncf.io/blog/2025/09...
#Kyverno #CNCF #CloudNative
An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025.
Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes.
🛠️ Join us → www.cncf.io/blog/2025/09...
#Kyverno #CNCF #CloudNative
KubeCon + CloudNativeCon North America 2025 Co-Located Event Deep Dive: KyvernoCon
This is the very first KyvernoCon! While Kyverno has been part of the CNCF since November 2020, and has had a strong presence at past KubeCon events through policy as code focused talks…
www.cncf.io
September 18, 2025 at 9:22 PM
KyvernoCon is here! 🎉
An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025.
Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes.
🛠️ Join us → www.cncf.io/blog/2025/09...
#Kyverno #CNCF #CloudNative
An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025.
Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes.
🛠️ Join us → www.cncf.io/blog/2025/09...
#Kyverno #CNCF #CloudNative
Great evening with AWS User Group Norway! Insights on AWS Textract, Policy as Code, and Agentic AI, plus an impressive bachelor project presentation from talented students. Thanks to all speakers and Knowit for hosting. 👏
🔗 lnkd.in/p/egJ2DEYx
#AWS #AI #Cloud #TechCommunity #Norway #SharingIsCaring
🔗 lnkd.in/p/egJ2DEYx
#AWS #AI #Cloud #TechCommunity #Norway #SharingIsCaring
#aws #ai #agenticai #policyascode #cloud #techcommunity #awsusergroup #norway #sigmatechnology | Robert Eriksson
Had the chance to attend An Evening with AI and Policy as Code hosted by AWS User Group Norway earlier this week.
It was great to hear practical experiences around AWS Textract, Policy as Code with C...
lnkd.in
September 25, 2026 at 10:14 AM
Great evening with AWS User Group Norway! Insights on AWS Textract, Policy as Code, and Agentic AI, plus an impressive bachelor project presentation from talented students. Thanks to all speakers and Knowit for hosting. 👏
🔗 lnkd.in/p/egJ2DEYx
#AWS #AI #Cloud #TechCommunity #Norway #SharingIsCaring
🔗 lnkd.in/p/egJ2DEYx
#AWS #AI #Cloud #TechCommunity #Norway #SharingIsCaring
Azure Policy skaliert nicht mit Portal-Klicks. Versioniert Definitionen, Initiatives, Assignments und Exemptions gemeinsam. Details: lunaris.digital/blog/article... #Azure #PolicyAsCode
August 11, 2026 at 12:45 PM
Azure Policy skaliert nicht mit Portal-Klicks. Versioniert Definitionen, Initiatives, Assignments und Exemptions gemeinsam. Details: lunaris.digital/blog/article... #Azure #PolicyAsCode
Aiming for continuous ATO? Anchore Federal simplifies it with security checks & policy enforcement. See our approach: anchore.com/dod-software...
#cATO #PolicyasCode
#cATO #PolicyasCode
November 18, 2024 at 8:43 AM
Aiming for continuous ATO? Anchore Federal simplifies it with security checks & policy enforcement. See our approach: anchore.com/dod-software...
#cATO #PolicyasCode
#cATO #PolicyasCode
Inside the Tab
Read more: buff.ly/zeoOJZz
@TechFieldDay.com #SquareX #XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Read more: buff.ly/zeoOJZz
@TechFieldDay.com #SquareX #XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Inside the Tab
Browser Detection and Response — an EDR inside the browser
buff.ly
October 15, 2025 at 9:51 PM
Inside the Tab
Read more: buff.ly/zeoOJZz
@TechFieldDay.com #SquareX #XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Read more: buff.ly/zeoOJZz
@TechFieldDay.com #SquareX #XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Some thoughts about security and automation. I'm probably going to turn this into a presentation for #NolaSec soon.
#PolicyAsCode #SecureByDesign #DevSecOps #Resilience #InformationSecurity #Cybersecurity
#PolicyAsCode #SecureByDesign #DevSecOps #Resilience #InformationSecurity #Cybersecurity
Security should be the reason you can drive development at 100mph
Security should not slow your business (unless you need to go around a corner), we should make high speed business possible. Throughout my career—from my time reviewing bank security to leading global...
www.linkedin.com
January 12, 2026 at 3:48 AM
Some thoughts about security and automation. I'm probably going to turn this into a presentation for #NolaSec soon.
#PolicyAsCode #SecureByDesign #DevSecOps #Resilience #InformationSecurity #Cybersecurity
#PolicyAsCode #SecureByDesign #DevSecOps #Resilience #InformationSecurity #Cybersecurity
Congrats to the Kyverno project for achieving graduated status in the CNCF.
I wrote a post about Kyverno and how to use it to vet Kubernetes configuration prior to deployment, and how to use Kyverno with ConfigHub.
medium.com/@bgrant0607/...
#Kubernetes #Kyverno #PolicyAsCode
I wrote a post about Kyverno and how to use it to vet Kubernetes configuration prior to deployment, and how to use Kyverno with ConfigHub.
medium.com/@bgrant0607/...
#Kubernetes #Kyverno #PolicyAsCode
Vetting Kubernetes configuration with Kyverno prior to deployment
Kyverno is a policy-as-code tool for Kubernetes that enforces state-based policy constraints, which can be used with ConfigHub.
medium.com
March 18, 2026 at 3:50 PM
Congrats to the Kyverno project for achieving graduated status in the CNCF.
I wrote a post about Kyverno and how to use it to vet Kubernetes configuration prior to deployment, and how to use Kyverno with ConfigHub.
medium.com/@bgrant0607/...
#Kubernetes #Kyverno #PolicyAsCode
I wrote a post about Kyverno and how to use it to vet Kubernetes configuration prior to deployment, and how to use Kyverno with ConfigHub.
medium.com/@bgrant0607/...
#Kubernetes #Kyverno #PolicyAsCode
Policy-as-code translates organizational rules into executable definitions; Ethosure enforces AI agent behavior deterministically. #PolicyAsCode #AIControls https://ethosure.ca/policy-as-code-turning-rules-into-ai-enforcement/ Free Download - https://ethosure.ca/get-the-kit/
September 19, 2026 at 3:52 PM
Policy-as-code translates organizational rules into executable definitions; Ethosure enforces AI agent behavior deterministically. #PolicyAsCode #AIControls https://ethosure.ca/policy-as-code-turning-rules-into-ai-enforcement/ Free Download - https://ethosure.ca/get-the-kit/
#Cedar - an #opensource authorisation policy language and SDK - has officially joined #CNCF as a Sandbox project!
It aims to provide a vendor-neutral standard for defining and enforcing fine-grained permissions in modern applications.
Details here 👉 bit.ly/4bx7c23
#DevOps #PolicyAsCode #InfoQ
It aims to provide a vendor-neutral standard for defining and enforcing fine-grained permissions in modern applications.
Details here 👉 bit.ly/4bx7c23
#DevOps #PolicyAsCode #InfoQ
February 2, 2026 at 6:34 AM
#Cedar - an #opensource authorisation policy language and SDK - has officially joined #CNCF as a Sandbox project!
It aims to provide a vendor-neutral standard for defining and enforcing fine-grained permissions in modern applications.
Details here 👉 bit.ly/4bx7c23
#DevOps #PolicyAsCode #InfoQ
It aims to provide a vendor-neutral standard for defining and enforcing fine-grained permissions in modern applications.
Details here 👉 bit.ly/4bx7c23
#DevOps #PolicyAsCode #InfoQ
How would your security strategy change if every browser tab could see and stop threats in real time, right where users interact with the web?
Learn more about SquareX and what they offer from Security Field Day.
#XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Learn more about SquareX and what they offer from Security Field Day.
#XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
October 15, 2025 at 9:51 PM
How would your security strategy change if every browser tab could see and stop threats in real time, right where users interact with the web?
Learn more about SquareX and what they offer from Security Field Day.
#XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Learn more about SquareX and what they offer from Security Field Day.
#XFD14 #Cybersecurity #EDR #ThreatPrevention #PolicyAsCode
Stop infrastructure drift and security leaks. Learn how to implement an automated architecture firewall using Policy as Code (OPA) for Terraform PRs. #Terraform #PolicyAsCode
Secure Terraform PRs with an Architecture Firewall
Stop infrastructure drift and security leaks. Learn how to implement an automated architecture firewall using Policy as Code (OPA) for Terraform PRs.
devopsstart.com
June 16, 2026 at 1:31 PM
Stop infrastructure drift and security leaks. Learn how to implement an automated architecture firewall using Policy as Code (OPA) for Terraform PRs. #Terraform #PolicyAsCode
🚨 Security doesn't start in prod — it starts at terraform plan.
With Policy as Code tools like #OPA, #Checkov, #Snyk, and #Sentinel by @hashicorp.com, you can catch misconfigs before they deploy. 🛡️
🎥 youtube.com/shorts/C-2OJ...
#Terraform #HashiCorp #DevSecOps #PolicyAsCode
With Policy as Code tools like #OPA, #Checkov, #Snyk, and #Sentinel by @hashicorp.com, you can catch misconfigs before they deploy. 🛡️
🎥 youtube.com/shorts/C-2OJ...
#Terraform #HashiCorp #DevSecOps #PolicyAsCode
Shift Left with Terraform | Catch Security Bugs Before Deploy
YouTube video by DevOps Compass | by Docker Captain
youtube.com
May 26, 2025 at 11:24 AM
🚨 Security doesn't start in prod — it starts at terraform plan.
With Policy as Code tools like #OPA, #Checkov, #Snyk, and #Sentinel by @hashicorp.com, you can catch misconfigs before they deploy. 🛡️
🎥 youtube.com/shorts/C-2OJ...
#Terraform #HashiCorp #DevSecOps #PolicyAsCode
With Policy as Code tools like #OPA, #Checkov, #Snyk, and #Sentinel by @hashicorp.com, you can catch misconfigs before they deploy. 🛡️
🎥 youtube.com/shorts/C-2OJ...
#Terraform #HashiCorp #DevSecOps #PolicyAsCode
New post in our Trustworthy AI series: Kill switches and circuit breakers for agent workloads.
How to halt agents, block runaway loops, and enforce runtime safety.
Read: www.sakurasky.com/blog/missing...
#AIEngineering #AgentSecurity #CloudSecurity #PolicyAsCode #SakuraSky
How to halt agents, block runaway loops, and enforce runtime safety.
Read: www.sakurasky.com/blog/missing...
#AIEngineering #AgentSecurity #CloudSecurity #PolicyAsCode #SakuraSky
Trustworthy AI Agents: Kill Switches and Circuit Breakers
Why autonomous agents need hard limits, circuit breakers, and emergency stop mechanisms to prevent runaway execution and cascading failures.
www.sakurasky.com
November 18, 2025 at 8:16 AM
New post in our Trustworthy AI series: Kill switches and circuit breakers for agent workloads.
How to halt agents, block runaway loops, and enforce runtime safety.
Read: www.sakurasky.com/blog/missing...
#AIEngineering #AgentSecurity #CloudSecurity #PolicyAsCode #SakuraSky
How to halt agents, block runaway loops, and enforce runtime safety.
Read: www.sakurasky.com/blog/missing...
#AIEngineering #AgentSecurity #CloudSecurity #PolicyAsCode #SakuraSky
✍️ #PolicyAsCode #PaC is emerging as a key area of focus for #AppSec in the age of cloud-native software development, but putting it into practice remains a challenge.👇 www.reversinglabs.com/blog/policy-...
How to implement Policy as Code for a more secure SDLC | ReversingLabs
Policy as Code is emerging as a key area of focus for application security teams in the age of cloud-native software development. But implementation can be daunting.
www.reversinglabs.com
August 6, 2025 at 1:18 PM
✍️ #PolicyAsCode #PaC is emerging as a key area of focus for #AppSec in the age of cloud-native software development, but putting it into practice remains a challenge.👇 www.reversinglabs.com/blog/policy-...
Tacle glissé sur les tableurs Excel !
Le 1/10 à la #WAX2026 au Vélodrome, Robinson Maigné vous montrera comment dompter les CIS Benchmarks en #PolicyAsCode.
🎟️ Bloquez votre place sur www.waxconf.fr avant le coup d'envoi !
Fini la compliance chronophage, place à l'automatisation 🚀
#WAX2026
Le 1/10 à la #WAX2026 au Vélodrome, Robinson Maigné vous montrera comment dompter les CIS Benchmarks en #PolicyAsCode.
🎟️ Bloquez votre place sur www.waxconf.fr avant le coup d'envoi !
Fini la compliance chronophage, place à l'automatisation 🚀
#WAX2026
August 18, 2026 at 10:01 AM
Tacle glissé sur les tableurs Excel !
Le 1/10 à la #WAX2026 au Vélodrome, Robinson Maigné vous montrera comment dompter les CIS Benchmarks en #PolicyAsCode.
🎟️ Bloquez votre place sur www.waxconf.fr avant le coup d'envoi !
Fini la compliance chronophage, place à l'automatisation 🚀
#WAX2026
Le 1/10 à la #WAX2026 au Vélodrome, Robinson Maigné vous montrera comment dompter les CIS Benchmarks en #PolicyAsCode.
🎟️ Bloquez votre place sur www.waxconf.fr avant le coup d'envoi !
Fini la compliance chronophage, place à l'automatisation 🚀
#WAX2026
Least-Privilege Access Controls for Secrets Management
https://beefed.ai/en/least-privilege-secrets-management
#LeastPrivilege #SecretsAccessControl #VaultPolicies #RolebasedAccess #PolicyAsCode
https://beefed.ai/en/least-privilege-secrets-management
#LeastPrivilege #SecretsAccessControl #VaultPolicies #RolebasedAccess #PolicyAsCode
Least-Privilege Access Controls for Secrets Management
beefed.ai
September 12, 2026 at 9:46 AM
Least-Privilege Access Controls for Secrets Management
https://beefed.ai/en/least-privilege-secrets-management
#LeastPrivilege #SecretsAccessControl #VaultPolicies #RolebasedAccess #PolicyAsCode
https://beefed.ai/en/least-privilege-secrets-management
#LeastPrivilege #SecretsAccessControl #VaultPolicies #RolebasedAccess #PolicyAsCode
Code as Conversation: Die IDE wird zur KI-Kollaborationsstation. Code entsteht als Nebenprodukt eines iterativen, domänenfokussierten Dialogs zwischen Mensch und Maschine.
#NoOps #PolicyAsCode #CodeAsConversation #ProductCreators #DomainExpert
#NoOps #PolicyAsCode #CodeAsConversation #ProductCreators #DomainExpert
NoOps - YouTube
youtube.com
September 6, 2026 at 6:08 PM
Code as Conversation: Die IDE wird zur KI-Kollaborationsstation. Code entsteht als Nebenprodukt eines iterativen, domänenfokussierten Dialogs zwischen Mensch und Maschine.
#NoOps #PolicyAsCode #CodeAsConversation #ProductCreators #DomainExpert
#NoOps #PolicyAsCode #CodeAsConversation #ProductCreators #DomainExpert
Admission politikalarını tik atıp geçeceğimiz
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
Kyverno ile Policy-as-Code: Admission Kontrolünde Denge
Admission politikaları güvenlik onay kutusu değil, kümenin yazma yoluna eklenen senkron bağımlılıktır. Kyverno 1.19 sonrası üç eksende denge kurma rehberi.
mustafaerbay.com.tr
August 31, 2026 at 11:11 AM
Admission politikalarını tik atıp geçeceğimiz
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
We treated admission policies like a checkbox until
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/en/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/en/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
Policy-as-Code with Kyverno: Balance in Admission Control
Admission policies are not a security checkbox; they are a synchronous dependency on your cluster's write path. A guide to balance on three axes after Kyverno 1.19.
mustafaerbay.com.tr
August 31, 2026 at 11:36 AM
We treated admission policies like a checkbox until
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/en/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
#Kyverno #PolicyAsCode #Kubernetes #Admission
https://mustafaerbay.com.tr/en/blog/technology/kyverno-ile-policy-as-code-admission-kontrolunde-denge/
📝 Neuer Blog-Beitrag: Policy-as-Code für Kubernetes 2026: Kyverno nach CNCF-Graduierung im Vergleich mit OPA Gatekeeper
Kyverno erreichte im März 2026 den CNCF-Graduiertenstatus. Ein Vergleich der beiden wichtigsten Policy Engines für Kubernetes — Kyv…
#Kubernetes #Sicherheit #PolicyasCode
Kyverno erreichte im März 2026 den CNCF-Graduiertenstatus. Ein Vergleich der beiden wichtigsten Policy Engines für Kubernetes — Kyv…
#Kubernetes #Sicherheit #PolicyasCode
Policy-as-Code für Kubernetes 2026: Kyverno nach CNCF-Graduierung im Vergleich mit OPA Gatekeeper
Kyverno erreichte im März 2026 den CNCF-Graduiertenstatus. Ein Vergleich der beiden wichtigsten Policy Engines für Kubernetes — Kyverno vs. OPA Gatekeeper — und warum Policy-as-Code 2026 zur Betriebsnotwendigkeit wird.
blog.saaro.net
July 27, 2026 at 12:42 PM
📝 Neuer Blog-Beitrag: Policy-as-Code für Kubernetes 2026: Kyverno nach CNCF-Graduierung im Vergleich mit OPA Gatekeeper
Kyverno erreichte im März 2026 den CNCF-Graduiertenstatus. Ein Vergleich der beiden wichtigsten Policy Engines für Kubernetes — Kyv…
#Kubernetes #Sicherheit #PolicyasCode
Kyverno erreichte im März 2026 den CNCF-Graduiertenstatus. Ein Vergleich der beiden wichtigsten Policy Engines für Kubernetes — Kyv…
#Kubernetes #Sicherheit #PolicyasCode