… TL;DR Kyverno 1.18 delivers: Stronger security controls for HTTP-based policy execution and multiple CVE mitigations Significant CLI enhancements for testing and applying modern policy types Policy engine improvements for performance, observability, and scalability Enhancements to the policies Helm… …
… Polarise , a German sovereign AI cloud provider, is one example of an operator running this exact shape in production: shared GPU capacity underneath, a tenant cluster per customer on top, all under EU jurisdiction. The operator changes, the pattern is the same. …
… National rail operators, major banks, and European telecoms are already using Kubernetes, GitOps, and policy driven automation to operate regulated workloads at scale across sovereign environments. …
… See the project docs for the real API surface. kind: DataPlane metadata: name: eu-west labels: jurisdiction: eu spec: observabilityPlaneRef: eu-observability telemetry stays in-region registry, gateway, and network settings scoped to the EU boundary --- kind: Environment metadata: name: production-… …