Skip to content
Kyverno

kyverno oci push

kyverno oci push

Section titled “kyverno oci push”

Push policies that are included in an OCI image to OCI registry.

Synopsis

Section titled “Synopsis”

Push policies that are included in an OCI image to OCI registry. An optional kyverno-bundle.yaml at the root of the directory names the bundle and assigns resources to named sets.

kyverno oci push [dir or file] [flags]

Examples

Section titled “Examples”
  # Push policy to an OCI image from a given policy file
  kyverno oci push ./policy.yaml -i <imgref>


  # Push multiple policies to an OCI image from a given directory that includes policies
  kyverno oci push . -i <imgref>

Options

Section titled “Options”
  -h, --help           help for push
  -i, --image string   image reference to push to or pull from

Options inherited from parent commands

Section titled “Options inherited from parent commands”
      --add_dir_header                      If true, adds the file directory to the header of the log messages
      --alsologtostderr                     log to standard error as well as files (no effect when -logtostderr=true)
      --alsologtostderrthreshold severity   logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)
      --kubeconfig string                   Paths to a kubeconfig. Only required if out-of-cluster.
      --legacy_stderr_threshold_behavior    If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). If false, stderrthreshold is honored even when logtostderr=true (default true)
      --log_backtrace_at traceLocation      when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                      If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                     If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint              Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                         log to standard error instead of files (default true)
      --one_output                          If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --skip_headers                        If true, avoid header prefixes in the log messages
      --skip_log_headers                    If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity            logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)
  -v, --v Level                             number for the log level verbosity
      --vmodule moduleSpec                  comma-separated list of pattern=N settings for file-filtered logging

SEE ALSO

Section titled “SEE ALSO”
  • kyverno oci - Pushes, pulls, validates, inspects, and resolves Kyverno CEL Policy Bundles in OCI registries. See “kyverno oci –help” for each subcommand’s own flags and examples.