kokuwaio/kyverno
A WoodpeckerCI plugin to run kyverno and kubectl to lint kubernetes manifests.
Image
Integration & delivery
Developer tools
0
5.4K
kokuwaio/kyverno repository overview
Kyverno WoodpeckerCI Plugin
A WoodpeckerCI plugin for kyverno and kustomize to lint kubernetes manifests. Also usable with Gitlab, Github or locally, see examples for usage.
Features
- runs kustomize if
entrypoint.shis found and checks for occurances of<patched> - can use policies from directory, see setting
policies - runnable with local docker daemon
Example
Woodpecker:
steps:
kyverno:
depends_on: []
image: kokuwaio/kyverno:v1.18.2
settings:
manifests: kustomize
policy: policies
Gitlab: (using script is needed because of https://gitlab.com/gitlab-org/gitlab/-/issues/19717)
kyverno:
needs: []
stage: lint
image:
name: kokuwaio/kyverno:v1.18.2
entrypoint: [""]
script: [/usr/local/bin/entrypoint.sh]
variables:
PLUGIN_MANIFESTS: kustomize
PLUGIN_POLICY: policies
CLI:
docker run --rm --volume=$(pwd):$(pwd):rw --workdir=$(pwd) kokuwaio/kyverno:v1.18.2
Settings
| Settings Name | Environment | Default | Description |
|---|---|---|---|
manifests | PLUGIN_MANIFESTS | $PWD | Directory to search for Kubernetes manifests. |
policy | PLUGIN_POLICY | none | Directory/Git to search for policies to use. |
exceptions | PLUGIN_EXCEPTIONS | none | Policy exceptionsto apply. |
warn-no-pass | PLUGIN_WARN_NO_PASS | true | Warn if no resources where checked. |
table | PLUGIN_TABLE | true | Display violations as table. |
detailed-results | PLUGIN_DETAILED_RESULTS | true | Display violations with detailed results. |
Alternatives
| Image | Comment | amd64 | arm64 |
|---|---|---|---|
| kokuwaio/kyverno | Woodpecker plugin |  |  |
| ghcr.io/kyverno/kyverno-cli | not a Woodpecker plugin, official |  |  |
| bitnami/kyverno-cli | not a Woodpecker plugin |  |  |
| nirmata/kyverno-cli | not a Woodpecker plugin, outdated |  |  |
| gbaeke/kyverno-cli | not a Woodpecker plugin, outdated |  |  |
Tag summary
Content type
Image
Digest
sha256:ec54df7fa…
Size
67 MB
Last updated
14 days ago
docker pull kokuwaio/kyverno:v1.18.2