Kyverno logo

Kyverno

Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.

3 APIs 0 Features
Cloud NativeGovernanceKubernetesPolicy ManagementSecurity

APIs

Kyverno

Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate, and generate Kubernetes resources using policies written as Kuberne...

Kyverno CLI

The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes resources outside of a cluster. It can be used in CI/CD pipelines ...

Kyverno Policy Reporter API

The Kyverno Policy Reporter REST API provides endpoints for querying PolicyReport and ClusterPolicyReport custom resources generated by Kyverno. It exposes policy results, statu...

Semantic Vocabularies

Kyverno Context

11 classes · 47 properties

JSON-LD

Resources

🔗
LinkedIn
LinkedIn
🔗
Website
Website
🔗
Documentation
Documentation
🚀
GettingStarted
GettingStarted
📄
ChangeLog
ChangeLog
👥
GitHubOrganization
GitHubOrganization
👥
GitHubRepository
GitHubRepository
📰
Blog
Blog
🔗
Community
Community
🔗
JSONSchema
JSONSchema
🔗
JSONLD
JSONLD
🔗
LLMsTxt
LLMsTxt

Sources

Raw ↑
aid: kyverno
name: Kyverno
description: >-
  Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes
  admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
  - Cloud Native
  - Governance
  - Kubernetes
  - Policy Management
  - Security
url: https://raw.githubusercontent.com/api-evangelist/kyverno/refs/heads/main/apis.yml
created: '2025-01-01'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
  - aid: kyverno:kyverno
    name: Kyverno
    description: >-
      Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate, and
      generate Kubernetes resources using policies written as Kubernetes resources. It supports policy types across
      multiple API groups including kyverno.io, policies.kyverno.io, and policyreport.io, covering validation, mutation,
      generation, cleanup, and image verification use cases.
    humanURL: https://kyverno.io/
    tags:
      - Kubernetes
      - Policy
      - Security
    properties:
      - type: Documentation
        url: https://kyverno.io/docs/introduction/
      - type: GettingStarted
        url: https://kyverno.io/docs/installation/
      - type: Reference
        url: https://kyverno.io/docs/policy-types/
      - type: ChangeLog
        url: https://kyverno.io/docs/releases/
      - type: GitHubRepository
        url: https://github.com/kyverno/kyverno
  - aid: kyverno:kyverno-cli
    name: Kyverno CLI
    description: >-
      The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes
      resources outside of a cluster. It can be used in CI/CD pipelines to validate resources before deployment, run
      policy tests, and interact with JMESPath expressions used in policy rules.
    humanURL: https://kyverno.io/docs/kyverno-cli/
    tags:
      - CLI
      - Developer Tools
      - Kubernetes
      - Policy
    properties:
      - type: Documentation
        url: https://kyverno.io/docs/kyverno-cli/
      - type: Reference
        url: https://kyverno.io/docs/kyverno-cli/reference/kyverno/
      - type: GitHubRepository
        url: https://github.com/kyverno/kyverno
  - aid: kyverno:kyverno-policy-reporter-api
    name: Kyverno Policy Reporter API
    description: >-
      The Kyverno Policy Reporter REST API provides endpoints for querying PolicyReport and ClusterPolicyReport custom
      resources generated by Kyverno. It exposes policy results, status counts, and resource-level violation data, and
      serves as the backend for the Policy Reporter UI.
    humanURL: https://kyverno.github.io/policy-reporter/
    tags:
      - Observability
      - Policy Reports
      - REST API
    properties:
      - type: Documentation
        url: https://kyverno.github.io/policy-reporter/
      - type: Reference
        url: https://kyverno.github.io/policy-reporter/core/api-reference/
      - type: GettingStarted
        url: https://kyverno.github.io/policy-reporter/guide/getting-started/
      - type: GitHubRepository
        url: https://github.com/kyverno/policy-reporter
      - type: OpenAPI
        url: openapi/kyverno-policy-reporter-openapi.yml
common:
  - type: LinkedIn
    url: https://www.linkedin.com/company/nirmata
  - type: Website
    url: https://kyverno.io/
  - type: Documentation
    url: https://kyverno.io/docs/
  - type: GettingStarted
    url: https://kyverno.io/docs/installation/
  - type: ChangeLog
    url: https://kyverno.io/docs/releases/
  - type: GitHubOrganization
    url: https://github.com/kyverno
  - type: GitHubRepository
    url: https://github.com/kyverno/kyverno
  - type: Blog
    url: https://kyverno.io/blog/
  - type: Community
    url: https://kyverno.io/community/
  - type: JSONSchema
    url: json-schema/kyverno-policy-schema.json
    name: Kyverno Policy JSON Schema
    description: >-
      JSON Schema for Kyverno Policy and ClusterPolicy custom resources including validation, mutation, generation, and
      image verification rules.
  - type: JSONLD
    url: json-ld/kyverno-context.jsonld
    name: Kyverno JSON-LD Context
    description: Linked data context mapping Kyverno policy resources and policy report entities to standard vocabularies.
  - type: Integrations
    url: https://kyverno.io/integrations
  - type: LLMsTxt
    url: https://kyverno.io/llms.txt
integrations:
  - name: kyverno
  - name: Adidas
  - name: Bloomberg
  - name: Linkedin
  - name: Razorpay
  - name: Robinhood
  - name: Spotify
  - name: Telecom
  - name: US-DOD
  - name: Vodafone
  - name: Wayfair
  - name: Yahoo
  - name: Open Policy Agent
  - name: CNCF
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com