# admission controller Published articles for admission controller. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Critical Kyverno Vulnerability -- CVE-2026-54523 DevFeed: [Critical Kyverno Vulnerability -- CVE-2026-54523]() Original publisher: [Read original article]() Author: Anubhav Sharma Published: 2026-07-29T01:08:41Z Content type: news Language: en Sources: [Nirmata]() Topics: [Kyverno](), [vulnerability](), [Exploit](), [Kubernetes](), [Cloud Native Ecosystem]() Tags: [2026](), [admission-controller](), [ai](), [cloud-native](), [cloud-native-ecosystem](), [cncf](), [cve](), [devsecops](), [engineering](), [kubernetes](), [kyverno](), [nctl-ai](), [platform-engineering](), [policy](), [policy-as-code](), [policy-management](), [release](), [upgrade](), [vulnerability]() ### AI overview The article reports CVE-2026-54523, a critical Kyverno vulnerability affecting versions 1.18.0 and 1.18.1. A tenant able to create a NamespacedMutatingPolicy could bypass namespace isolation and generate resources in other namespaces, potentially enabling cluster-wide privilege escalation. Kyverno 1.18.2 patches the vulnerability. ### Source excerpt Critical Kyverno Vulnerability -- CVE-2026-54523 On July 13, 2026, a critical vulnerability was disclosed in Kyverno, the Kubernetes-native policy engine used broadly across the cloud native ecosystem for policy-as-code enforcement. The vulnerability, tracked as CVE-2026-54523 (GHSA-79gf-7frw-68m9), allows a tenant with permission to create a NamespacedMutatingPolicy... The post Critical Kyverno Vulnerability -- CVE-2026-54523 first appeared on Nirmata. ## Kube-Policies: Guardrails for Apps Running in Kubernetes DevFeed: [Kube-Policies: Guardrails for Apps Running in Kubernetes]() Original publisher: [Read original article]() Author: Hardik Darji Published: 2025-01-28T08:00:00Z Content type: article Language: en Sources: [Square Corner Blog](), [Square Corner Blog RSS Feed]() Topics: [Kubernetes](), [cloud security](), [Open Policy Agent](), [Testing](), [SIEM, Security, Observability]() Tags: [admission-controller](), [engineering](), [kubernetes](), [observability](), [open-policy-agent](), [security](), [security-policies](), [testing]() ### AI overview This article introduces Square's design considerations for security guardrails in Kubernetes environments. It explains why default Kubernetes configurations can leave applications vulnerable and describes requirements for an abstraction layer built on Open Policy Agent, including policy dry-runs, minimal user disruption, testing, exception management, extensibility, and observability. ### Source excerpt Design considerations for highly sensitive environments. ## Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes DevFeed: [Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes]() Original publisher: [Read original article]() Published: 2023-07-06T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [Containers](), [Security](), [Deployment]() Tags: [admission-controller](), [container](), [container-image](), [deployment](), [kubernetes](), [policy-controller](), [security](), [security-policy-platform](), [signing](), [signing-containers](), [sigstore](), [sigstore-policy-controller](), [software-signatures](), [software-supply-chain](), [webhooks]() ### AI overview This article explains five challenges involved in verifying container signatures during Kubernetes deployment. It focuses on admission webhooks, locating containers across resource types, handling ephemeral containers and custom resource definitions, and maintaining logic as Kubernetes APIs change. ### Source excerpt Learn about five challenges you might encounter when trying to verify container signatures at deployment time in Kubernetes. ## Are Kubernetes Validating Admission Policies the end of admission controllers? DevFeed: [Are Kubernetes Validating Admission Policies the end of admission controllers?]() Original publisher: [Read original article]() Published: 2023-03-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [supply-chain-security](), [API](), [Structured-data]() Tags: [admission-controller](), [api](), [api-server](), [blog-post](), [chainguard-enforce](), [common-expression-language](), [complexity](), [deployment](), [fragmentation](), [integration](), [kubernetes](), [kubernetes-admission-controller](), [performance](), [policy](), [security-policies](), [software-supply-chain](), [supply-chain](), [validation]() ### AI overview The article explains how Kubernetes Validating Admission Policies, introduced in alpha in Kubernetes 1.26, let users evaluate many admission checks natively in the API server using Google's Common Expression Language (CEL). It argues that these policies improve performance, reliability, and integration by reducing reliance on webhooks, while noting that admission controllers remain necessary for policies beyond CEL's deliberately restricted capabilities. ### Source excerpt Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers. ## Sigstore policy-controller 101 DevFeed: [Sigstore policy-controller 101]() Original publisher: [Read original article]() Published: 2023-03-29T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [sigstore policy controller](), [supply-chain-security](), [Kubernetes admission controller](), [Kubernetes]() Tags: [admission-controller](), [cicd](), [cloud-native](), [cluster-security](), [container-images](), [container-security](), [cosign](), [getting-started](), [how-to](), [kubernetes](), [kubernetes-admission-controller](), [kubernetes-clusters](), [security-policies](), [signing-containers](), [sigstore](), [sigstore-policy-controller](), [software-supply-chain-security]() ### AI overview This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions. ### Source excerpt Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.