About Kyverno

Policy Management for Kubernetes and cloud native environments.

Kyverno policies are declarative YAML resources and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. For efficient handling of complex logic, Kyverno supports both JMESPath and the Common Expressions Language (CEL) languages.

In Kubernetes environments, Kyverno policies can validate, mutate, generate, and cleanup any Kubernetes resource, including custom resources. To help secure the software supply chain Kyverno policies can verify OCI container image signatures and artifacts. Kyverno policy reports and policy exceptions are also Kubernetes API resources.

The Kyverno CLI can be used to apply and test policies off-cluster e.g., as part of a CI/CD pipeline.

Kyverno Policy Reporter provides in-cluster report management with a graphical web-based user interface.

Kyverno JSON allows applying Kyverno policies in non-Kubernetes environments and on any JSON payload.

Kyverno Chainsaw provides declarative end-to-end testing for policies.