Research possible integrations with Kyverno and come up with strategy

keptn / lifecycle-toolkit

Toolkit for cloud-native application lifecycle management

https://keptn.sh

Apache License 2.0

272 stars 111 forks source link

Research possible integrations with Kyverno and come up with strategy #2963

Open mowies opened 5 months ago

mowies commented 5 months ago

Goal

Research possible integration use cases with Kyverno. One idea is to connect traces between Kyverno and Keptn so that users get a full picture during deployment that starts with Admission checks from Kyverno and then goes on with pre/post checks from Keptn.

Notes

We are already in the process of replacing Kuttl with Kyverno's Chainsaw tool.

mowies commented 5 months ago

Ideas from @eddycharly :

kyverno exposes metrics that keptn could use to detect resources with violations
keptn could somehow hook into the policy report system that is used by kyverno (in audit mode) and otheres to report policy violations (source)