<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Policy-as-Code on CuraDevOps</title><link>https://curadevops.metacog.co.kr/tags/policy-as-code/</link><description>Recent content in Policy-as-Code on CuraDevOps</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Thu, 20 Aug 2026 11:19:17 +0000</lastBuildDate><atom:link href="https://curadevops.metacog.co.kr/tags/policy-as-code/index.xml" rel="self" type="application/rss+xml"/><item><title>Kyverno framed as platform primitive, not a security tool</title><link>https://curadevops.metacog.co.kr/insights/2026-08-20-kyverno-is-a-platform-primitive-not-a-security-tool/</link><pubDate>Thu, 20 Aug 2026 11:19:17 +0000</pubDate><guid>https://curadevops.metacog.co.kr/insights/2026-08-20-kyverno-is-a-platform-primitive-not-a-security-tool/</guid><description>&lt;ul>
&lt;li>&lt;strong>Platform/SRE — Learn:&lt;/strong> Reframes Kyverno ownership and positioning — useful for platform teams deciding where policy enforcement lives in their IDP strategy, but no operational change required.&lt;/li>
&lt;li>&lt;strong>CI/CD — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>Leader — Learn:&lt;/strong> Relevant for leaders deciding which team owns Kyverno&amp;rsquo;s budget and roadmap — a useful framing for org-design and golden-path decisions, but no action required now.&lt;/li>
&lt;/ul></description></item><item><title>Building observable policy as code on CNCF</title><link>https://curadevops.metacog.co.kr/insights/2026-08-12-good-apps-aren-t-born-they-re-guided-building-observable-pol/</link><pubDate>Wed, 12 Aug 2026 11:40:52 +0000</pubDate><guid>https://curadevops.metacog.co.kr/insights/2026-08-12-good-apps-aren-t-born-they-re-guided-building-observable-pol/</guid><description>&lt;ul>
&lt;li>&lt;strong>Platform/SRE — Learn:&lt;/strong> Explores using observable policy as code to guide application behavior on Kubernetes — worth reading for platform teams evaluating OPA/Kyverno patterns, but no concrete operational change required.&lt;/li>
&lt;li>&lt;strong>CI/CD — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item><item><title>Kyverno policy engine environment-spoofing technique explained</title><link>https://curadevops.metacog.co.kr/insights/2026-07-22-i-made-a-policy-engine-think-it-was-in-production/</link><pubDate>Wed, 22 Jul 2026 12:23:02 +0000</pubDate><guid>https://curadevops.metacog.co.kr/insights/2026-07-22-i-made-a-policy-engine-think-it-was-in-production/</guid><description>&lt;ul>
&lt;li>&lt;strong>Platform/SRE — Learn:&lt;/strong> Interesting technique for testing Kyverno policies by simulating production context; useful for validating policy behavior without live cluster risk, but no operational change required.&lt;/li>
&lt;li>&lt;strong>CI/CD — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>