Hands-on with Policy Reporter | Rawkode Live

In this episode, we take a look at a new open source project: Policy Reporter. Policy Reporter brings visibility into Kyverno policy enforcement.

🍿 Rawkode Live

#RawkodeLive

🕰 Timeline

00:00 - Holding screen
01:00 - Introductions
04:20 - What is Policy Reporter?
11:00 - Installing Policy Reporter
13:20 - Policy Reporter UI
24:00 - Integrating with Prometheus and Grafana

👥 About the Guests

Frank Jogeleit

Software Developer @move:elevator. I love learning new technologies the trial and error way. I have been working as a DevOps hobbyist with Kubernetes for almost a year.

🔨 About the Technologies

Kyverno

Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.

#Policy #Compliance #Kubernetes

Policy Reporter

Creates Prometheus Metrics for PolicyReports and ClusterPolicyReports. Ships with an optional Web UI and can send new Results to different Clients like Loki and Elasticsearch. Provides a optional Monitoring Subchart with a ServiceMonitor and Grafana Dashboards for the Prometheus Operator.