… By leveraging Kyverno as a Policy as Code engine, platform teams can automate much of that CoCo-specific wiring, improving developer experience while preserving the core zero-trust security model.. …
… Bootstrapping of Argo CD Application CRDs Connecting infrastructure Git repositories to Argo CD The Terraform cluster module below reflects the configuration used, including Key Vault integration via the CSI driver and Calico network policy enforcement: Terraform k8s cluster Module modules/aks/main… …
… They still use policy, but they treat policy as a layer inside the sandbox, not as the boundary itself. Why? Because you can’t write a complete security policy for something when you don’t know what it’s going to do next. …
… Rich policy integration : Combine L7 routing with Cilium Network Policies and Hubble observability. …
… A multi-cluster platform foundation A single cluster is a tool. A well-architected multi-cluster system is a platform built to serve many teams, many workloads, and many environments consistently, without every consumer needing to understand what’s underneath. …
Posted on May 13, 2026 by Erick Bourgeois, Director & Head of Kubernetes Platform Engineering, RBC Capital Markets CNCF projects highlighted in this post As we shared in our earlier post on FluxCD , RBC Capital Markets has been on a deliberate journey to modernize our Kubernetes platform. …
… TAG App Delivery produced the Platforms white paper https://tag-app-delivery.cncf.io/whitepapers/platforms/ , shaped the GitOps principles https://opengitops.dev/ , ran project reviews, and built a sustained community of practitioners who care deeply about the CNCF ecosystem. …
