Kyverno
Kyverno is a cloud-native policy engine. It uses policies written as Kubernetes-style YAML with CEL expressions to validate, change, create, delete, and verify resources before and after they enter a cluster.
itCloud native tools and technologies | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Intro
Kyverno
Kyverno is a cloud-native policy engine. In Kubernetes, it receives admission requests from the API server and evaluates policies that match the requested resource. A policy can allow or reject the request, change the resource, create related resources, remove resources, or verify container images.
Kyverno exists because Kubernetes configuration is flexible and shared across application, platform, and operations teams. A policy gives those teams a separate, declarative place to express security, compliance, and operational rules. You manage the policy as a Kubernetes resource and keep it with the same review and delivery process as other configuration.
The mental model
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://kyverno.io/docs/introduction/
Supports
- Kyverno is a cloud-native policy engine
- policy management purpose
- YAML and CEL policy authoring
- Kubernetes resource management
- policy capabilities
- https://kyverno.io/docs/introduction/how-kyverno-works/
Supports
- dynamic admission controller
- admission webhook request flow
- optional controllers
- resource matching
- CLI evaluation
- https://kyverno.io/docs/policy-types/
Supports
- ValidatingPolicy
- MutatingPolicy
- GeneratingPolicy
- CleanupPolicy
- DeletingPolicy
- ImageValidatingPolicy
- https://kyverno.io/docs/guides/testing-policies/
Supports
- Kyverno CLI test command
- expected results
- continuous integration testing
- https://kyverno.io/docs/subprojects/kyverno-cli/
Supports
- CLI applies policies to resource files or clusters
- apply command
- test command
- https://kyverno.io/docs/guides/reports/
Supports
- policy report role and status reporting
- https://kyverno.io/docs/guides/troubleshooting/
Supports
- broad policy matches increase evaluation load