# Installer kyverno avec Homebrew, Nix, zypper, winget Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de kyverno pour les workflows d'agents IA. ## installation ```sh sudo av install brew:kyverno ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install kyverno ``` Preuve: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#kyverno ``` Preuve: nixpkgs package indexes: pkgs/by-name/ky/kyverno/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install kyverno ``` Preuve: openSUSE Tumbleweed package metadata: kyverno from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id kyverno.kyverno -e ``` Preuve: Windows Package Manager source index: kyverno.kyverno from https://cdn.winget.microsoft.com/cache/source.msix ## Faits du paquet - **Clé du paquet:** brew:kyverno - **Gestionnaire de paquets:** Homebrew - **Page du gestionnaire de paquets:** - **Version:** 1.18.2 - **Résumé source:** Kubernetes Native Policy Management - **Page d'accueil:** - **Dépôt:** - **Docs amont:** - **Licence:** Apache-2.0 - **Archive source:** - **Dernière mise à jour:** 2026-07-28T01:44:24+02:00 - **Généré:** 2026-08-04T22:13:35+00:00 ## exécutables - kyverno (cli) - kyverno (alias) ## Dépendances de compilation - go ## Comportement d'installation - hook post-installation: non défini - Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version et fraîcheur - page générée: 2026-08-04 - version du gestionnaire: 1.18.2 - gestionnaire mis à jour: 2026-07-28 - données locales: OK - dépôt amont: https://github.com/kyverno/kyverno - dernière version détectée: v1.18.2 (à jour) ## Historique du projet et usages Kyverno is a Kubernetes-native policy engine for validation, mutation, generation, cleanup, image verification, and policy reporting. Its defining choice is to express policy as Kubernetes resources, letting teams use YAML, kubectl, GitOps, and admission-controller workflows instead of learning a separate policy language. It became one of the central tools in the Kubernetes policy-management ecosystem, especially for platform and security teams that want policy-as-code aligned with Kubernetes resource models. ### Historique du projet Nirmata introduced Kyverno in 2019 as an open source Kubernetes-native policy-management project. The project was built for Kubernetes governance and security use cases such as validating resources, mutating defaults, generating supporting resources, and reporting violations. Kyverno entered CNCF as a sandbox project on November 10, 2020, moved to incubation on July 13, 2022, and graduated on March 16, 2026. CNCF project data lists February 4, 2019 as the first commit, matching the project's 2019 origin story. ### Historique d'adoption Kyverno adoption grew with Kubernetes platform engineering and DevSecOps practices. Its policy library, Helm charts, CLI, reports, and admission-controller model made it usable both in clusters and in pre-admission workflows such as CI checks. CNCF project data in 2026 showed thousands of contributors and over a thousand contributing organizations, along with public case studies. That governance path and visible contributor base made Kyverno a mainstream cloud-native policy project rather than a vendor-only utility. ### Modes d'utilisation Operators install Kyverno into Kubernetes clusters to validate, mutate, generate, or clean up resources through admission controls and background scans. Policies are stored as Kubernetes custom resources and can be managed with kubectl, kustomize, Helm, and Git workflows. The `kyverno` CLI is used for testing and applying policies outside the cluster, which made the Homebrew package useful to developers building policy libraries or checking manifests before deployment. ### Pourquoi les passionnés de paquets s'y intéressent Kyverno is significant to package and CLI catalogues because it bridges a cluster controller and a local developer tool. Installing the CLI gives package-manager users access to the same policy language that governs production clusters. Its companion projects broadened the package surface around the core engine, including Chainsaw for end-to-end tests, Kyverno JSON for non-Kubernetes JSON payloads, Policy Reporter, and the Kyverno Envoy plugin. ### Chronologie - 2019: Nirmata introduced Kyverno as Kubernetes-native policy management. - 2020: CNCF accepted Kyverno as a sandbox project on November 10. - 2022: Kyverno moved to CNCF incubation on July 13. - 2023: Kyverno published third-party security audit work as part of project hardening. - 2026: Kyverno graduated in CNCF on March 16. - 2026: Kyverno 1.18 was announced on April 24 as the first release after CNCF graduation. ### Related projects - OPA Gatekeeper is the most common comparison point for Kubernetes admission policy, with a different policy-language and ecosystem model. - Chainsaw, Kyverno JSON, Policy Reporter, and the Kyverno Envoy plugin are companion projects named by the Kyverno project as separate tools around the core engine. - Sigstore, Cosign, Helm, Kustomize, and Kubernetes ValidatingAdmissionPolicy features are adjacent technologies in Kyverno's supply-chain and policy workflows. ### Sources - - - - - - ## Notes de sécurité infrastructure mutation or orchestration signal. - **Risque Geiger:** orange / moyen - infrastructure mutation or orchestration signal ## Détails de la base source - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** kyverno - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Autres enregistrements de gestionnaires de paquets - Nix - kyverno: normalized package name match | nixpkgs package indexes: pkgs/by-name/ky/kyverno/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - kyverno - 1.18.2-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kyverno from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | CLI and kubectl plugin for Kyverno | https://github.com/kyverno/kyverno - zypper - kyverno-bash-completion - 1.18.2-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kyverno-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for kyverno | https://github.com/kyverno/kyverno - zypper - kyverno-fish-completion - 1.18.2-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kyverno-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for kyverno | https://github.com/kyverno/kyverno - zypper - kyverno-zsh-completion - 1.18.2-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kyverno-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for kyverno | https://github.com/kyverno/kyverno - winget - kyverno.kyverno: normalized package name match | Windows Package Manager source index: kyverno.kyverno from https://cdn.winget.microsoft.com/cache/source.msix ## Liens liés - [Cloud CLI packages](https://pkg.so/fr/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://pkg.so/fr/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/fr/brew/go/) - Build dependency declared by Homebrew. - [kwctl](https://pkg.so/fr/brew/kwctl/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes, policy, policy-engine. - [polaris](https://pkg.so/fr/brew/polaris/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes, policy, security. - [linkerd](https://pkg.so/fr/brew/linkerd/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes, security. - [kubernetes-cli](https://pkg.so/fr/brew/kubernetes-cli/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes. - [k9s](https://pkg.so/fr/brew/k9s/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes. - [k3d](https://pkg.so/fr/brew/k3d/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes. - [ctlptl](https://pkg.so/fr/brew/ctlptl/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes. - [openshift-cli](https://pkg.so/fr/brew/openshift-cli/) - Shares pkgdb curated category or tags: cli, cloud-infrastructure, kubernetes. - [crossplane](https://pkg.so/fr/brew/crossplane/) - Local package facts share a topical domain. Shared terms: cli, cloud, cloud-infrastructure, control, infrastructure. ## Combined YAML source View the package source record on GitHub. [combined/kyverno.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kyverno.yml) ## Sources - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph