Kubernetes Native Policy Management ๐
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
๐ Documentation
Kyverno installation and reference documents are available at kyverno.io.
๐ Quick Start
๐ Installation
๐ Sample Policies
๐โโ๏ธ Getting Help
We are here to help!
๐ For feature requests and bugs, file an issue.
๐ For discussions or questions, join the Kyverno Slack channel.
๐ For community meeting access, join the mailing list.
๐ To get updates โญ๏ธ star this repository.
โ Contributing
Thanks for your interest in contributing to Kyverno! Here are some steps to help get you started:
โ Read and agree to the Contribution Guidelines.
โ Browse through the GitHub discussions.
โ Read Kyverno design and development details on the GitHub Wiki.
โ Check out the good first issues list. Add a comment with /assign
to request assignment of the issue.
โ Check out the Kyverno Community page for other ways to get involved.
Software Bill of Materials
All Kyverno images include a Software Bill of Materials (SBOM) in CycloneDX JSON format. SBOMs for Kyverno images are stored in a separate repository at ghcr.io/kyverno/sbom
. More information on this is available at Fetching the SBOM for Kyverno.
Contributors
Kyverno is built and maintained by our growing community of contributors!
Made with contributors-img.
License
Copyright 2023, the Kyverno project. All rights reserved. Kyverno is licensed under the Apache License 2.0.
Kyverno is a Cloud Native Computing Foundation (CNCF) Incubating project and was contributed by Nirmata.