Kyverno logo

Kyverno

Kyverno is a Kubernetes native policy management engine for security, automation, and governance. It uses Kubernetes admission controllers to validate, mutate, and generate configurations using policies written as Kubernetes resources.

3 APIs 0 Features
Cloud NativeGovernanceKubernetesPolicy ManagementSecurity

APIs

Kyverno

Kyverno is a Kubernetes-native policy engine that runs as a dynamic admission controller to validate, mutate, and generate Kubernetes resources using policies written as Kuberne...

Kyverno CLI

The Kyverno CLI provides a command-line interface for applying and testing Kyverno policies against Kubernetes resources outside of a cluster. It can be used in CI/CD pipelines ...

Kyverno Policy Reporter API

The Kyverno Policy Reporter REST API provides endpoints for querying PolicyReport and ClusterPolicyReport custom resources generated by Kyverno. It exposes policy results, statu...

Semantic Vocabularies

Kyverno Context

11 classes · 47 properties

JSON-LD

Resources

🔗
Website
Website
🔗
Documentation
Documentation
🚀
Getting Started
Getting Started
📄
Change Log
Change Log
👥
GitHub Organization
GitHub Organization
👥
GitHubRepository
GitHubRepository
📰
Blog
Blog
🔗
Community
Community
🔗
JSONSchema
JSONSchema
🔗
JSON-LD
JSON-LD

Sources

Raw ↑
aid: kyverno
name: Kyverno
description: >-
  Kyverno is a Kubernetes native policy management engine for security,
  automation, and governance. It uses Kubernetes admission controllers to
  validate, mutate, and generate configurations using policies written as
  Kubernetes resources.
type: Index
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
tags:
  - Cloud Native
  - Governance
  - Kubernetes
  - Policy Management
  - Security
url: https://raw.githubusercontent.com/api-evangelist/kyverno/refs/heads/main/apis.yml
created: '2025-01-01'
modified: '2026-04-28'
specificationVersion: '0.19'
apis:
  - aid: kyverno:kyverno
    name: Kyverno
    description: >-
      Kyverno is a Kubernetes-native policy engine that runs as a dynamic
      admission controller to validate, mutate, and generate Kubernetes
      resources using policies written as Kubernetes resources. It supports
      policy types across multiple API groups including kyverno.io, policies.kyverno.io,
      and policyreport.io, covering validation, mutation, generation, cleanup,
      and image verification use cases.
    humanURL: https://kyverno.io/
    tags:
      - Kubernetes
      - Policy
      - Security
    properties:
      - type: Documentation
        url: https://kyverno.io/docs/introduction/
      - type: Getting Started
        url: https://kyverno.io/docs/installation/
      - type: Reference
        url: https://kyverno.io/docs/policy-types/
      - type: Change Log
        url: https://kyverno.io/docs/releases/
      - type: GitHubRepository
        url: https://github.com/kyverno/kyverno
  - aid: kyverno:kyverno-cli
    name: Kyverno CLI
    description: >-
      The Kyverno CLI provides a command-line interface for applying and
      testing Kyverno policies against Kubernetes resources outside of a
      cluster. It can be used in CI/CD pipelines to validate resources
      before deployment, run policy tests, and interact with JMESPath
      expressions used in policy rules.
    humanURL: https://kyverno.io/docs/kyverno-cli/
    tags:
      - CLI
      - Developer Tools
      - Kubernetes
      - Policy
    properties:
      - type: Documentation
        url: https://kyverno.io/docs/kyverno-cli/
      - type: Reference
        url: https://kyverno.io/docs/kyverno-cli/reference/kyverno/
      - type: GitHubRepository
        url: https://github.com/kyverno/kyverno
  - aid: kyverno:kyverno-policy-reporter-api
    name: Kyverno Policy Reporter API
    description: >-
      The Kyverno Policy Reporter REST API provides endpoints for querying
      PolicyReport and ClusterPolicyReport custom resources generated by
      Kyverno. It exposes policy results, status counts, and resource-level
      violation data, and serves as the backend for the Policy Reporter UI.
    humanURL: https://kyverno.github.io/policy-reporter/
    tags:
      - Observability
      - Policy Reports
      - REST API
    properties:
      - type: Documentation
        url: https://kyverno.github.io/policy-reporter/
      - type: Reference
        url: https://kyverno.github.io/policy-reporter/core/api-reference/
      - type: Getting Started
        url: https://kyverno.github.io/policy-reporter/guide/getting-started/
      - type: GitHubRepository
        url: https://github.com/kyverno/policy-reporter
      - type: OpenAPI
        url: openapi/kyverno-policy-reporter-openapi.yml
common:
  - type: Website
    url: https://kyverno.io/
  - type: Documentation
    url: https://kyverno.io/docs/
  - type: Getting Started
    url: https://kyverno.io/docs/installation/
  - type: Change Log
    url: https://kyverno.io/docs/releases/
  - type: GitHub Organization
    url: https://github.com/kyverno
  - type: GitHubRepository
    url: https://github.com/kyverno/kyverno
  - type: Blog
    url: https://kyverno.io/blog/
  - type: Community
    url: https://kyverno.io/community/
  - type: JSONSchema
    url: json-schema/kyverno-policy-schema.json
    name: Kyverno Policy JSON Schema
    description: JSON Schema for Kyverno Policy and ClusterPolicy custom resources including validation, mutation, generation, and image verification rules.
  - type: JSON-LD
    url: json-ld/kyverno-context.jsonld
    name: Kyverno JSON-LD Context
    description: Linked data context mapping Kyverno policy resources and policy report entities to standard vocabularies.
maintainers:
  - FN: Kin Lane
    email: [email protected]