Skip to content
Kyverno

Resource Definitions

Kyverno uses Kubernetes Custom Resource Definitions (CRDs) for policies and supporting resources.

The complete Kyverno CRD reference is generated from API type definitions. Use the documentation version selector when you need the schemas for an older release.

kubectl explain

Section titled “kubectl explain”

Inspect the schemas installed in your cluster using kubectl explain:

Terminal window
kubectl explain validatingpolicy.spec --api-version=policies.kyverno.io/v1
kubectl explain mutatingpolicy.spec --api-version=policies.kyverno.io/v1
kubectl explain generatingpolicy.spec --api-version=policies.kyverno.io/v1
kubectl explain deletingpolicy.spec --api-version=policies.kyverno.io/v1
kubectl explain imagevalidatingpolicy.spec --api-version=policies.kyverno.io/v1
kubectl explain policyexception.spec --api-version=policies.kyverno.io/v1
kubectl explain globalcontextentry.spec --api-version=kyverno.io/v2

To inspect an individual field, append its path, for example:

Terminal window
kubectl explain validatingpolicy.spec.validationActions --api-version=policies.kyverno.io/v1

Kyverno’s structural schemas also enable integrated help in Kubernetes-enabled IDEs such as VS Code with the Kubernetes Extension.