Application Configuration Analysis Module (Kyverno)

The Kyverno-based application configuration analysis module is designed to analyze cluster resources for compliance with configured policies.

The module supports several types of policies:

  • Generate - The policy adds the necessary data/configurations to the created resource
  • Mutate - The policy modifies the resource being created.
  • Validate - The policy validates the resource being created.

The list of recommended policies for installation in a cluster can be found on the [Security Policies](/2.13/en/security/policies/ page).

To install and configure the module in the cluster interface of the Shturval platform, go to the section Cluster/Cluster name/Services and repositories/Installed services.

Find the Application Configuration Analysis module. If the module is not displayed, go to the available charts, find the “shturval-policy-manager” chart and click “Install”.

Additional information can be found on official website.