KubeCon + CloudNativeCon India 2025

In today's complex service mesh environments, ensuring secure and efficient network traffic management is a significant challenge. Many developers struggle with implementing robust, context-aware access control policies without disrupting existing systems. The Kyverno Envoy Plugin offers a solution by integrating with the Envoy proxy and leveraging the Kyverno Authz Server within the cluster, along with a cluster-wide resource called AuthorizationPolicy. This resource utilizes the CEL language to process these requests seamlessly, allowing you to authenticate and enforce policies seamlessly on all traffic.
In this hands-on session, the speakers will leverage this plugin to enhance the security and control of applications, ensuring they are protected from unauthorized access and threats without requiring changes to your microservices. They will also showcase how the plugin seamlessly integrates with various service meshes such as Istio, to extend its functionality across environments.