Struggling to Understand Kyverno and CEL Syntax
I'm in the process of transitioning my Kyverno cluster policies to the new ValidatingPolicy and MutatingPolicy formats, and I'm really finding CEL quite frustrating. The documentation doesn't seem…
policies
Tips for Understanding Kyverno and CEL Syntax
I'm currently in the process of updating my Kyverno cluster policies to comply with the new ValidatingPolicy and MutatingPolicy standards, and I'm really struggling with CEL. It feels…
Can I Set Up a Cron-Style IAM Policy for Specific Times and Days?
I'm looking to create an IAM policy that allows access only during certain times of the day or specific days of the week or month. I've seen `aws:CurrentTime`…
Can't Exclude the Security Info Page in Conditional Access Policies?
I'm looking for a way to set up a conditional access policy that enforces very specific login methods but allows single-use TAP for the security info page only.…
Why are my Intune policy settings showing as Noncompliant?
Has anyone else been running into problems with Intune Policies? We've started seeing some settings flagged as Noncompliant for different users and machines. Interestingly, the same settings work…
How to Manage Vault Configs and Policies as Code in Kubernetes?
I'm setting up HashiCorp Vault in my homelab using the official Helm chart, but I'm trying to design it with production-like standards. I want everything—configurations, scripts, policies, and…
How to Make Security Policies Work at a Small SaaS Startup?
I'm the accidental security point person at our small SaaS startup with about 20 employees, and right now, our security policy is pretty much just wishful thinking. I…