Kyverno is a policy engine designed for Kubernetes
Policies are managed as Kubernetes resources and no new language is required to write policies.
This allows using familiar tools such as
kustomize to manage policies.
Kyverno policies can validate, mutate, generate, and cleanup Kubernetes resources plus ensure OCI image supply chain security.
The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.