Kyverno CLI

Apply and test policies outside a cluster

The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.

The CLI can be used in CI/CD pipelines to assist with the resource authoring process to ensure they conform to standards prior to them being deployed. It can be used as a kubectl plugin or as a standalone CLI.

The CLI, although composed of the same Kyverno codebase, is a purpose-built binary available via multiple installation methods but is distinct from the Kyverno container image which runs as a Pod in a target Kubernetes cluster.


Installation Methods

Methods for installing the Kyverno CLI

CLI Commands

Using the Kyverno CLI

Reference documentation

Kyverno CLI reference documentation


Last modified April 08, 2024 at 8:29 AM PST: Refactor links (#1205) (5060f3d)