All Tools
K
Dev ToolsFreeOpen Source
KYVERNO
YAML policy as code for Kubernetes
Apache-2.0
ABOUT
Admission control with Rego is a specialist skill, so GPU clusters ship with open privileged pods. Kyverno expresses validate, mutate, and generate rules as Kubernetes YAML so platform teams can require non-root inference, inject GPU nodeSelectors, and generate NetworkPolicies.
INTEGRATION GUIDE
1. Block privileged containers on GPU nodes used for training
2. Mutate inference Deployments to add the correct GPU nodeSelector
3. Generate default NetworkPolicies for new ML namespaces
4. Require resource limits on agent and vector DB workloads
TAGS
kubernetespolicysecurityadmissiongitopsmlopsopen-source