OPA/Gatekeeper

Kyverno sits on the security budget line, and three of its four verbs go unused

A CNCF blog post argues Kyverno gets filed as an admission gate and then run at a quarter of its capacity. The teams getting returns are platform teams, not security teams.