Kyverno

Policy as Code, Simplified!


About Kyverno



Unified Policy-as-Code (PaC) for Kubernetes and cloud native environments



Kubernetes Native

Powerful extensions of Kubernetes policy types with integrated CEL support.

Works Everywhere

Apply Kubernetes style policies to any resource and any JSON payload using the CLI or SDK.

Reporting

Integrated OpenReports compatible producers and dashboards.

Exceptions

Time-bound and fine grained exception management decoupled from policies.

Shift-Left

Command Line Interface for integrations into CI/CD and IaC (Terraform, etc.) pipelines.

Testing

Tooling for declarative unit tests and end-to-end behavioral tests.


Complete Policy-Based Resource Lifecycle Management


Validate
Mutate
Generate
Cleanup
Verify Images


Join our community


Interested in learning and contributing?

Sign up on our mailing list or the Kyverno channel on Kubernetes Slack for discussions, and join our next community meeting. Check out the community page for more details.

Go Report Card License: Apache-2.0 GitHub Repo stars CII Best Practices

Kyverno is a CNCF Incubating Project





The Linux Foundation® (TLF) has registered trademarks and uses trademarks. For a list of TLF trademarks, see Trademark Usage.