Skip to content

Kyverno Config Schema

Note

This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.

Return to the root config schema

https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/main/config/schemas/config.yaml#/properties/kyverno

Configure Kyverno and Kyverno Policies

Abstract Extensible Status Identifiable Custom Properties Additional Properties Access Restrictions Defined In
Can be instantiated No Unknown status No Forbidden Allowed none config/schemas/config.yaml*

TYPE:

object (Kyverno Config)

PROPERTIES:

Property Type Required Nullable Defined by
enabled boolean Optional cannot be null Welkin Apps Config
resources object Optional cannot be null Welkin Apps Config
nodeSelector object Optional cannot be null Welkin Apps Config
podAffinity object Optional cannot be null Welkin Apps Config
nodeAffinity object Optional cannot be null Welkin Apps Config
topologySpreadConstraints array Optional cannot be null Welkin Apps Config
tolerations array Optional cannot be null Welkin Apps Config

enabled

enabled

TYPE:

boolean (Enable Kyverno)

resources

Resource requests are used by the kube-scheduler to pick a node to schedule pods on.

Limits are enforced. Resources are commonly 'cpu' and 'memory'.

resources

TYPE:

object (Kubernetes Resource Requirements)

EXAMPLES:

requests:
  memory: 128Mi
  cpu: 100m
limits:
  memory: 256Mi
  cpu: 250m

nodeSelector

Kubernetes node selector

Kubernetes assign pod node

nodeSelector

TYPE:

object (Kubernetes Node Selector)

EXAMPLES:

kubernetes.io/os: linux

podAffinity

Affinity is a group of affinity scheduling rules.

podAffinity

TYPE:

object (Affinity)

nodeAffinity

Affinity is a group of affinity scheduling rules.

nodeAffinity

TYPE:

object (Affinity)

topologySpreadConstraints

TopologySpreadConstraints describes how pods should spread across topology domains.

topologySpreadConstraints

TYPE:

an array of merged types (Details)

tolerations

Kubernetes Tolerations

Kubernetes taint and toleration

tolerations

TYPE:

an array of merged types (Details)

Return to the root config schema


Generated Wed Apr 23 03:52:40 UTC 2025 from elastisys/compliantkubernetes-apps@main