The Kubernetes system type helps you implement guardrails on the resources that run on your Kubernetes cluster through validating or mutating admission control. For example, ensure all images come from a trusted registry; disallow running pods with root privileges; ensure storage is encrypted. Table 1 shows the list of supported features for Kubernetes systems.
The Kubernetes system type does not allow you to control the APIs for the applications running on top of your Kubernetes cluster. You can refer to the Envoy system type to accomplish this task.
For more information on how to get started with Styra by deploying a policy for a Kubernetes cluster, see the Kubernetes tutorial.