# Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL

DevFeed: [Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL](<https://devfeed.tech/articles/scaling-kubernetes-governance-a-platform-engineer-s-guide-to-kyverno-and-cel-12220.md>)

Original publisher: [Read original article](<https://platformengineering.org/blog/scaling-kubernetes-governance-a-platform-engineers-guide-to-kyverno-and-cel>)

Author: Koray Oksay

Published: 2026-07-23T05:40:01Z

Content type: article

Language: en

Sources: [Platform Engineering Blog](<https://devfeed.tech/sources/platform-engineering-blog.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Platform Engineering](<https://devfeed.tech/topics/platform-engineering.md>), [Security](<https://devfeed.tech/topics/security.md>), [developer velocity](<https://devfeed.tech/topics/developer-velocity.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [YAML](<https://devfeed.tech/topics/yaml.md>), [opa](<https://devfeed.tech/topics/opa.md>), [rego](<https://devfeed.tech/topics/rego.md>)

Tags: [common-expression-language](<https://devfeed.tech/tags/common-expression-language.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [developer-velocity](<https://devfeed.tech/tags/developer-velocity.md>), [governance](<https://devfeed.tech/tags/governance.md>), [hipaa](<https://devfeed.tech/tags/hipaa.md>), [integration](<https://devfeed.tech/tags/integration.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kyverno](<https://devfeed.tech/tags/kyverno.md>), [pci-dss](<https://devfeed.tech/tags/pci-dss.md>), [platform](<https://devfeed.tech/tags/platform.md>), [policy](<https://devfeed.tech/tags/policy.md>), [security](<https://devfeed.tech/tags/security.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [soc-2](<https://devfeed.tech/tags/soc-2.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

## AI overview

A guide to using Kyverno and its Common Expression Language support for Kubernetes governance. It explains how platform engineering teams can enforce policies, automate resource changes, generate resources, verify image signatures, and maintain security and compliance while preserving developer velocity.

## Source excerpt

Kyverno with CEL support provides Policy-as-Code for Kubernetes governance. Enforce security, automate guardrails, and boost developer velocity for platform engineering teams.