Kyverno
A policy engine for Kubernetes that validates, mutates, generates and cleans up resources using YAML policies.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
1 more ways to get Kyverno
Package managers
- Homebrew
brew install kyverno
About Kyverno
Kyverno is a policy-as-code engine built for Kubernetes. Policies are written as Kubernetes-native resources in YAML with CEL expressions, so teams can require labels on pods, check container images, change resources as they are created, generate related resources or clean up old ones.
Although it began as a Kubernetes tool, Kyverno can now also validate Terraform plans and Dockerfiles and authorize HTTP and Envoy requests. It is a CNCF project with a library of sample policies, created by Nirmata. It suits platform teams who want to enforce rules on clusters without learning a separate policy language.
Strengths
- Policies written in familiar YAML and CEL
- Validates, mutates, generates and cleans up resources
- Large set of sample policies to start from
- Also handles Terraform plans and Dockerfiles
Limitations
- Requires a Kubernetes cluster for its main use
- Aimed at platform teams rather than individual users
Details
- Pricing
- FreeFree open-source CNCF project.
- License
- Open source, license not stated
- Developer
- The Kyverno contributors
- Platforms
- Self-hosted
- How it runs
- Self-hosted
- Account
- Not required
- Best suited for
- Platform teams enforcing security and compliance rules on Kubernetes
- Categories
- Container tools, Security tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Similar software
Related functionality, not necessarily a direct replacement.
cert-manager
A Kubernetes and OpenShift controller that issues and renews X.509 TLS certificates automatically.
Popeye
A command-line linter that scans live Kubernetes clusters and reports misconfigurations and potential issues.
Kustomize
A template-free tool for customising Kubernetes YAML configurations without forking them.
Helm
A package manager for Kubernetes that installs, upgrades and rolls back applications described as charts.
Clair
A self-hosted service that statically analyses container images for known vulnerabilities.
RKE2
A security-focused Kubernetes distribution from Rancher, also known as RKE Government.
