You’ve set up tenants, namespaces, and quotas. But how do you ensure every tenant follows the rules — and what happens when they don’t? In this session, you’ll explore policy enforcement in multi-tenant Kubernetes: requiring specific labels, blocking privileged containers, restricting image registries, enforcing resource limits. You’ll learn how to use Kyverno (or similar tools) to define policies as code, detect drift when teams work around constraints, handle the inevitable exception requests, and audit compliance across dozens of namespaces.

‍