Policy

How to enforce best practices and ensure compliance with Kyverno.

Understand how Chainguard Libraries evaluates, verifies, and controls dependencies across supported ecosystems.

Using Policy Controller to prevent running pods with extra capabilities

Using Policy Controller to prevent running privileged pods

Using Policy Controller to prevent running pods as root

Maximum container image age with Policy Controller

Use Policy Controller to limit pods to safe sysctls