OSS Tanbou
View on GitHubProject website

Kyverno — validate, mutate, and generate Kubernetes resources with policy as code

OSS scale score 277.4OSS health 100Update pace 87 commits/30d
About these scores

OSS scale score is an unbounded metric that log-compresses and weights Stars, Watchers, Forks, and Contributors. Discovery score is the current OSS scale score minus the score at discovery. Update pace is commits in the last 30 days, growth momentum is the OSS scale score difference within the recent observation window, and OSS health is a 0–100 rating based on available recency, Community Health, and release data.

Stars
8,168
Primary language
Go
License
Apache-2.0
Repository last updated
Sep 20, 2026

Overview

Kyverno is a Kubernetes-native policy engine that uses admission controls and background scans to validate, mutate, generate, and clean up resources as policy as code. It also verifies container-image signatures and supports guardrails for Pod Security Standards, resource controls, labeling, and other platform policies.

Features and best fit

Based on official documentation; not hands-on tested · Content checked:

Validate, mutate, and generate Kubernetes resources

Admission controls can validate new or updated resources, modify fields, create related resources, and background-scan existing resources.

Sources: [2]

Express security and operational guardrails as policy as code

Pod Security Standards, image signatures, naming conventions, resource quotas, NetworkPolicies, and similar requirements can be versioned and applied as Kubernetes policies.

Sources: [2]

For platform teams standardizing cluster guardrails

Kyverno fits organizations that want security, compliance, cost, and operational rules consistently enforced across Kubernetes teams.

Sources: [2][4]

It complements RBAC and Kubernetes security rather than replacing them

The README explicitly says Kyverno works alongside RBAC and cannot address vulnerabilities inherent in Kubernetes itself. Policies only enforce requirements that teams explicitly define and maintain.

Sources: [2]

Official sources

  1. [1]kyverno/kyverno repository(2026-09-20)
  2. [2]Kyverno README(2026-09-20)
  3. [3]Kyverno Apache-2.0 license(2026-09-20)
  4. [4]Kyverno documentation(2026-09-20)
Supplemental curator note

Kyverno is a strong fit for platform teams that want security, operational, and cost guardrails expressed close to Kubernetes resource definitions. As the README notes, it complements rather than replaces Kubernetes RBAC or fixes for vulnerabilities in Kubernetes itself.

Try it in 3 steps

  1. 1

    Add the Kyverno Helm repository

    Configure a test Kubernetes cluster to fetch the official Kyverno Helm chart.

    helm repo add kyverno https://kyverno.github.io/kyverno/ && helm repo update
  2. 2

    Install Kyverno

    Install Kyverno into its own namespace and wait for the admission-controller components to become ready.

    helm install kyverno kyverno/kyverno -n kyverno --create-namespace
  3. 3

    Try one small policy from the library

    Apply a simple validation policy first and inspect allow/deny behavior and PolicyReport output.

    https://kyverno.io/policies/
Check the official README

Growth

Growth trends · Last 30 days

8,168 Stars

Trend data is still being collected.

Development activity

Last 90 days · weekly

Commits (last 30 days)
87
Open PRs
359
Issues opened
540
Issues closed
490
PRs opened
795
PRs merged
413

Issues

540 / 490

Jun 23Sep 20
Issues openedIssues closed

Pull requests

795 / 413

Jun 23Sep 20
PRs openedPRs merged

Maintenance

Median first response
13 hr
Issue response rate
3.6% (3/84)

Based on up to the 100 newest issues opened by external users in the last 90 days. A first comment from an OWNER, MEMBER, or COLLABORATOR counts as a response; issues whose full comment history cannot be checked are excluded. The median and response rate update weekly.

Built with

Categories and tags

Categories

Tags

GitHub data

GitHub dataView detailed GitHub data
View on GitHub

GitHub Topics

  • kubernetes
  • compliance
  • governance
  • policy-as-code
  • security
Stars
8,168
Forks
1,601
Watchers
54
Open issues
366
Contributors
420
Primary language
Go
License
Apache-2.0
Repository last updated
Sep 20, 2026
Write a related article

Share a guide or use case for this OSS in Markdown. Articles are published after administrator approval.

Report incorrect information

Tell us if any listing information is incorrect or outdated.