Kyverno website screenshot

Kyverno

Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.

3 APIs 0 Features
Cloud NativeGovernanceKubernetesPolicy ManagementSecurity

APIs

Kyverno

Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate, and generate Kubernetes resources using policies written as Kuberne...

Kyverno CLI

The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes resources outside of a cluster. It can be used in CI/CD pipelines ...

Kyverno Policy Reporter API

The Kyverno Policy Reporter REST API provides endpoints for querying PolicyReport and ClusterPolicyReport custom resources generated by Kyverno. It exposes policy results, statu...

Collections

Pricing Plans

Kyverno Plans Pricing

3 plans

PLANS

Rate Limits

Kyverno Rate Limits

5 limits

RATE LIMITS

FinOps

Semantic Vocabularies

Kyverno Context

11 classes · 47 properties

JSON-LD

Resources

🔗
LinkedIn
LinkedIn
🔗
Website
Website
🔗
Documentation
Documentation
🚀
GettingStarted
GettingStarted
📄
ChangeLog
ChangeLog
👥
GitHubOrganization
GitHubOrganization
👥
GitHubRepository
GitHubRepository
📰
Blog
Blog
🔗
Community
Community
🔗
JSONSchema
JSONSchema
🔗
JSONLD
JSONLD
🔗
LlmsText
LlmsText

Sources

Raw ↑
opencollection: 1.0.0
info:
  name: Kyverno Policy Reporter API
  version: 2.0.0
items:
- info:
    name: Health
    type: folder
  items:
  - info:
      name: Kyverno Health check
      type: http
    http:
      method: GET
      url: http://localhost:8080/healthz
    docs: Returns the health status of the Policy Reporter server. Used by Kubernetes liveness and readiness probes to confirm
      the server is operational.
- info:
    name: Policies
    type: folder
  items:
  - info:
      name: Kyverno List notification targets
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/targets
    docs: Returns a list of configured notification targets such as Slack, Teams, Loki, Elasticsearch, and others. Each target
      entry includes its name, minimum priority filter, and enabled sources.
  - info:
      name: Kyverno List policies
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/policies
      params:
      - name: namespace
        value: ''
        type: query
        description: Filter results by Kubernetes namespace
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: category
        value: ''
        type: query
        description: Filter results by policy category
    docs: Returns a list of policies with result counts grouped by status. Supports filtering by namespace, source, and category.
      Each entry includes counts of pass, fail, warn, error, and skip results.
  - info:
      name: Kyverno List policy rules
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/rules
      params:
      - name: namespace
        value: ''
        type: query
        description: Filter results by Kubernetes namespace
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
    docs: Returns a list of policy rule names that have results across all namespaces. Can be filtered by namespace and source
      to narrow the results.
  - info:
      name: Kyverno List policy categories
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/categories
      params:
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
    docs: Returns a list of policy category names used to group related policies. Categories are defined in policy metadata
      and may include values such as Pod Security Standards or Best Practices.
- info:
    name: Namespaces
    type: folder
  items:
  - info:
      name: Kyverno List namespaces with policy reports
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/namespaces
    docs: Returns a list of namespace names that have associated PolicyReport resources. Useful for filtering result queries
      by namespace.
- info:
    name: Sources
    type: folder
  items:
  - info:
      name: Kyverno List policy sources
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/sources
    docs: Returns a list of policy source names that have generated reports. Policy sources include kyverno, kube-bench, trivy,
      and other policy engines that produce PolicyReport resources.
- info:
    name: PolicyReports
    type: folder
  items:
  - info:
      name: Kyverno List namespaced policy reports
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/policy-reports
      params:
      - name: namespace
        value: ''
        type: query
        description: Filter results by Kubernetes namespace
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: page
        value: ''
        type: query
        description: Page number for paginated results (1-based)
      - name: perPage
        value: ''
        type: query
        description: Number of results per page
    docs: Returns a paginated list of PolicyReport resources across all namespaces or filtered by a specific namespace. Each
      report includes summary counts and metadata about the namespace and source.
- info:
    name: ClusterPolicyReports
    type: folder
  items:
  - info:
      name: Kyverno List cluster-scoped policy reports
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/cluster-policy-reports
      params:
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: page
        value: ''
        type: query
        description: Page number for paginated results (1-based)
      - name: perPage
        value: ''
        type: query
        description: Number of results per page
    docs: Returns a paginated list of ClusterPolicyReport resources. These reports cover cluster-scoped resources such as
      Nodes, Namespaces, and ClusterRoles that are not bound to a specific namespace.
- info:
    name: Results
    type: folder
  items:
  - info:
      name: Kyverno List namespace-scoped policy results
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/namespace-scoped/results
      params:
      - name: namespace
        value: ''
        type: query
        description: Filter results by Kubernetes namespace
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: policy
        value: ''
        type: query
        description: Filter results by policy name
      - name: rule
        value: ''
        type: query
        description: Filter results by rule name
      - name: status
        value: ''
        type: query
        description: Filter results by result status
      - name: severity
        value: ''
        type: query
        description: Filter results by severity level
      - name: category
        value: ''
        type: query
        description: Filter results by policy category
      - name: kind
        value: ''
        type: query
        description: Filter results by Kubernetes resource kind
      - name: page
        value: ''
        type: query
        description: Page number for paginated results (1-based)
      - name: perPage
        value: ''
        type: query
        description: Number of results per page
    docs: Returns a paginated list of individual policy result entries from PolicyReport resources. Results can be filtered
      by namespace, policy, rule, status, severity, category, source, and resource kind or name.
  - info:
      name: Kyverno List cluster-scoped policy results
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/cluster-scoped/results
      params:
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: policy
        value: ''
        type: query
        description: Filter results by policy name
      - name: rule
        value: ''
        type: query
        description: Filter results by rule name
      - name: status
        value: ''
        type: query
        description: Filter results by result status
      - name: severity
        value: ''
        type: query
        description: Filter results by severity level
      - name: category
        value: ''
        type: query
        description: Filter results by policy category
      - name: kind
        value: ''
        type: query
        description: Filter results by Kubernetes resource kind
      - name: page
        value: ''
        type: query
        description: Page number for paginated results (1-based)
      - name: perPage
        value: ''
        type: query
        description: Number of results per page
    docs: Returns a paginated list of individual policy result entries from ClusterPolicyReport resources. Results can be
      filtered by policy, rule, status, severity, category, source, and resource kind or name.
  - info:
      name: Kyverno Get namespace-scoped result summary
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/namespace-scoped/summary
      params:
      - name: namespace
        value: ''
        type: query
        description: Filter results by Kubernetes namespace
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: category
        value: ''
        type: query
        description: Filter results by policy category
    docs: Returns aggregated result counts grouped by status for namespace-scoped policy reports. Supports the same filtering
      options as the results endpoint. Useful for dashboard and summary views.
  - info:
      name: Kyverno Get cluster-scoped result summary
      type: http
    http:
      method: GET
      url: http://localhost:8080/api/v1/cluster-scoped/summary
      params:
      - name: source
        value: ''
        type: query
        description: Filter results by policy source (e.g., kyverno, trivy)
      - name: category
        value: ''
        type: query
        description: Filter results by policy category
    docs: Returns aggregated result counts grouped by status for cluster-scoped policy reports. Supports the same filtering
      options as the cluster results endpoint.
bundled: true