Policy-as-code

13 posts

Kyverno policies for AI agents

Kyverno policies for AI agents: enforce Pod Security Restricted controls on agent pods at admission with a ValidatingPolicy, then test the policy with the CLI.

November 4, 2026 · 6 min read

How to collect Kubernetes compliance evidence for auditors

Pair Kyverno policy reports, which show current state, with the API server audit log, which shows history. Reports alone are not an audit trail by themselves.

November 3, 2026 · 6 min read

How to document policy exceptions as audit evidence

Record a Kyverno PolicyException as audit evidence: its policy and resource scope, the approver and expiry, and the PolicyReport entry that proves it applied.

October 27, 2026 · 6 min read

Who Controls Your AI Agents? Jim Bugwadia on Policy as Code for AI Governance

Jim Bugwadia explains how to govern AI agents with policy as code: decouple rules from apps, enforce every LLM, MCP and agent call, and keep developers moving.

October 22, 2026 · 4 min read

How to Secure VMware vSphere Kubernetes Service (VKS) with Kyverno

Secure VMware VKS clusters with Kyverno: enforce Pod Security Standards, RBAC and image signing at admission, deploy policies with Argo CD, scan for drift.

October 22, 2026 · 3 min read

How Razorpay Automates RBI Compliance on Kubernetes with Kyverno

Razorpay meets RBI Payment Aggregator rules on 7,000+ Kubernetes nodes with Kyverno policy as code: checks in CI, at admission and in scans, with live evidence.

October 22, 2026 · 5 min read

How Chase UK Made Kubernetes Audit-Ready with Kyverno Policy as Code

Chase UK replaced manual Kubernetes audits with Kyverno: 46 policies on 50 clusters, one Grafana compliance dashboard, under 20 ms admission latency.

October 22, 2026 · 6 min read

Reflecting on 2024: A Year of Growth and Innovation at Nirmata and Kyverno

As 2024 draws to a close, we at Nirmata are taking a moment to reflect on a year filled with remarkable achievements and advancements in Kubernetes security, governance…

December 26, 2024 · 3 min read

What Is Policy-As-Code? Top 10 Reasons Why Policy-As-Code Is Essential for Cloud-Native Success

Policy-as-code defines security, compliance and operational rules as versioned code that runs automatically. Here are 10 reasons cloud-native teams rely on it.

September 30, 2024 · 5 min read

Enhancing Application Security with Policy-as-Code

Read the latest on the critical role of policy-as-code and IaC in modern application security. Embed security in the very fabric of the Dev process. Nirmata explains…

September 27, 2024 · 3 min read

Using Policy-as-Code and Kyverno to Strengthen Governance and Security in Financial Institutions

Nirmata explores how large financial institutions can leverage policy-as-code, using Kyverno - the Kubernetes-native policy engine - for better governance and security.

September 24, 2024 · 4 min read

Why Policy-as-Code: reasons why platform engineering teams adopt policy-as-code for Kubernetes

Policy-as-code allows platform engineering teams to define, manage, and enforce policies for security, compliance, and operational requirements. Nirmata explains here.

September 18, 2024 · 3 min read