Carsten Thiel

GitOps gives you the power to define your desired state and reconciliation tells you whether it's applied. So you think you know what is running.

But reality can diverge, either through user creativity, drift, or edge-cases your Helm charts didn't cover? We learned that "temporary" manual fixes have a habit of becoming permanent.

In this lightning talk, we’ll explore the gap between declared intent and verified runtime reality. I’ll show how we use Kyverno’s CEL policy engine to continuously monitor and enforce what is running, not just what Git claims should be.