Post #1635325

Ok I'm really interested in the manifest-based MutatingAdmissionPolicies in Kubernetes 1.36. It looks like one of the most important features of tools like Kyvero/IPAGatekeeper is just a mainline feature now? Neat! The goal is to enforce a few specific security policies that aren't very well covered by existing helm charts, like setting hostUsers: false unless explicitly set to true by a workload that actually needs it for driver or metrics collection. Using the new built-in policy engine means not needing to deal with a new application to track or maintain #Kubernetes