kyverno kyverno
winget install --id=kyverno.kyverno -e Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Kyverno is a Kubernetes-native policy engine designed to enforce security, compliance, and operational excellence within Kubernetes clusters. It enables platform teams to define and execute policies using Kubernetes resources, eliminating the need for new languages or tools.
Key Features:
- Validation, Mutation, and Generation: Enforce policies at admission time or via background scans to validate configurations, mutate resources (e.g., adding labels), and generate missing components (e.g., NetworkPolicies).
- Image Validation: Verify container image signatures for supply chain security.
- Policy-as-Code: Define policies using familiar Kubernetes constructs, enabling seamless integration with existing workflows like kubectl, kustomize, and Git.
Audience & Benefit: Ideal for platform engineering teams managing Kubernetes clusters. Kyverno helps enforce best practices, reduce operational risks, and ensure compliance without requiring new tooling or processes. It supports use cases such as security hardening, cost optimization, and developer guardrails, all while maintaining compatibility with existing workflows.
Kyverno can be installed via winget on Windows.
