Name: ⚡ Lightning Talk: Why Your Cluster-Wide Policies Are a Risk (And What To Do About It) - Dhruv Puri, Aspora
Start: 2026-06-18T17:32:00+0530
End: 2026-06-18T17:37:00+0530

18-19 June
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon India 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in India Standard Time (UTC+5:30). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

⚡ Lightning Talk: Why Your Cluster-Wide Policies Are a Risk (And What To Do About It) - Dhruv Puri, Aspora

Thursday June 18, 2026 5:32pm - 5:37pm IST

Jasmine 2 (Level 3)

As Kubernetes evolves, so must policy enforcement. ValidatingAdmissionPolicy and MutatingAdmissionPolicy set new standards using CEL for policy logic. Kyverno aligned with these patterns and introduced CEL-based policy types.

However, cluster-scoped resources created challenges: RBAC complexity, isolation concerns, and performance bottlenecks. Kyverno addressed this with namespace-scoped policy types - limiting blast radius, simplifying permissions, and improving admission latency.

Dhruv Puri (Kyverno LFX Mentee) explains why namespace-scoped policies matter, how they secure multi-tenant environments, and how Kyverno internals can help you optimize admission performance.
Attendees leave with actionable strategies for namespace-scoped policies and a deeper understanding of Kyverno's architecture.

Speakers

Dhruv Puri

DevOps Engineer, Aspora

I’m an open-source contributor, with a strong interest in DevOps, cloud-native technologies, and large-scale infrastructure. I’ve worked with Kyverno wherein I implemented the namespace-scoped CEL policies and have previously contributed to Prometheus Operator as GSoC contributor... Read More →

Thursday June 18, 2026 5:32pm - 5:37pm IST
Jasmine 2 (Level 3)

⚡ Lightning Talks, Security

Content Experience Level Beginner

KubeCon + CloudNativeCon India 2026

Dhruv Puri

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event