Admission on 黄文卓 | DevOps Engineerhttps://socake.github.io/tags/admission/Recent content in Admission on 黄文卓 | DevOps EngineerHugo -- gohugo.iozh-CN17691281867@163.com (Wenzhuo Huang)17691281867@163.com (Wenzhuo Huang)© 2026 Wenzhuo HuangFri, 28 Nov 2025 10:00:00 +0800Kyverno 策略即代码实战：从准入到变异到生成的全场景落地https://socake.github.io/posts/kyverno-policy-as-code/Fri, 28 Nov 2025 10:00:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/kyverno-policy-as-code/一份基于 Kyverno 1.12+ 的生产落地笔记：覆盖 validate/mutate/generate/verifyImages 四种策略类型的实战用法、CEL 和 JMESPath 表达式语法、策略分层治理、PolicyException、性能调优和常见踩坑，并与 OPA Gatekeeper 做对比。