https://github.com/kyverno/kyverno

Cloud Native Policy Management

Cloud Native Policy Management 🎉

• About Kyverno
• Documentation
• Demos & Tutorials
• Popular Use Cases
• Explore the Policy Library
• Getting Help
• Contributing
• Software Bill of Materials
• Community Highlights
• Contributors
• License

Kyverno is a Kubernetes-native policy engine designed for platform engineering teams. It enables security, compliance, automation, and governance through policy-as-code. Kyverno can:

• Validate, mutate, generate, and clean up resources using Kubernetes admission controls and background scans.
• Verify container image signatures for supply chain security.
• Operate with tools you already use — like kubectl, kustomize, and Git.

Kyverno installation and reference documentation is available at kyverno.io.

• 👉 Quick Start
• 👉 Installation Guide
• 👉 Policy Library

• ▶️ Getting Started with Kyverno – YouTube
• 🧪 Kyverno Playground

Kyverno helps platform teams enforce best practices and security standards. Some common use cases include:

• Enforce Pod Security Standards (PSS)
• Require specific security contexts
• Validate container image sources and signatures
• Enforce CIS Benchmark policies

• Auto-label workloads
• Enforce naming conventions
• Generate default configurations (e.g., NetworkPolicies)
• Validate YAML and Helm manifests

• Enforce resource quotas and limits
• Require cost allocation labels
• Validate instance types
• Clean up unused resources

• Require readiness/liveness probes
• Enforce ingress/egress policies
• Validate container image versions
• Auto-inject config maps or secrets

Discover hundreds of production-ready Kyverno policies for security, operations, cost control, and developer enablement.

👉 Browse the Policy Library

We’re here to help:

• 🐞 File a GitHub Issue
• 💬 Join the Kyverno Slack Channel
• 📅 Attend Community Meetings
• ⭐️ Star this repository to stay updated

Thank you for your interest in contributing to Kyverno!

• ✅ Read the Contribution Guidelines
• 🧵 Join GitHub Discussions
• 📖 Read the Development Guide
• 🏁 Check Good First Issues and request with /assign
• 🌱 Explore the Community page

All Kyverno images include a Software Bill of Materials (SBOM) in CycloneDX format. SBOMs are available at:

• 👉 ghcr.io/kyverno/sbom
• 👉 Fetching the SBOM

Kyverno is built and maintained by our growing community of contributors!

Made with contributors-img

Copyright 2025, the Kyverno project. All rights reserved.
Kyverno is licensed under the Apache License 2.0.

Kyverno is a Cloud Native Computing Foundation (CNCF) Incubating project and was contributed by Nirmata.