Kyverno
Kubernetes-native policy engine that lets you write and enforce policies using plain YAML instead of a separate policy language.
- Actively maintained
- Foundation-backed
- Well documented
- Permissive license
Overview
Kyverno validates, mutates, and generates Kubernetes resources based on policies written as ordinary Kubernetes YAML manifests, so a team doesn't need to learn a new policy language to enforce rules like requiring resource limits or blocking privileged containers. It runs as an admission controller, rejecting non-compliant resources before they're created.
Kyverno is a fit for Kubernetes-focused teams that want policy enforcement without learning Rego, a YAML-native alternative to Open Policy Agent (also in this catalog) for teams that specifically don't want to introduce a separate policy language.
Why it's in this catalog
Catalog rating: ★★★☆☆ (3/5)
Kubernetes-native policy engine, a YAML-first alternative to OPA/Rego-based tools.
- Mature
- Foundation-governed
- Categories
- DevOps
- Languages
- Go
- License
- Apache-2.0
Related Projects
Open Policy Agent (OPA)
Apache-2.0General-purpose, CNCF-graduated policy engine for enforcing authorization, compliance, and configuration rules as code across microservices, APIs, Kubernetes, and CI pipelines.
Actively maintained
- DevOps
cert-manager
Apache-2.0Automates issuing, renewing, and managing TLS certificates for Kubernetes applications, eliminating manual certificate handling.
Actively maintained
- DevOps
Kubescape
Apache-2.0Kubernetes security posture and compliance scanner that checks clusters against security frameworks and best practices.
Actively maintained
- DevOps
Cilium
Apache-2.0eBPF-based networking, security, and observability platform for Kubernetes that replaces traditional networking components with kernel-level performance.
Actively maintained
- DevOps
Spotted an error? Suggest an edit on GitHub.