Skip to main content
Kyverno is a Kubernetes-native policy engine for validation, mutation, generation, and image verification - no new language required, policies are written as Kubernetes resources.

​
What Radar Shows

Policy / ClusterPolicy Detail View:
  • Failure action badge (Enforce in red, Audit in yellow)
  • Configuration: background scanning, webhook timeout, failure policy, schema validation
  • Rule type summary (validate/mutate/generate/verifyImages counts)
  • Individual rules with type badges and match/exclude indicators
  • Auto-generated rules list
PolicyReport / ClusterPolicyReport Detail View:
  • Visual result bar chart (pass/fail/warn/error/skip proportions)
  • Scope and source information
  • Individual results with status badges, severity levels, policy/rule names
  • Expandable details: message, category, source, affected resources
  • Problem detection (AlertBanner for failures or errors)
Resource Browser: Smart columns show status (colored by worst outcome), failure action, rule counts, and pass/fail/warn/error/skip breakdowns.

​
Supported CRDs

PolicyReport findings are policy posture, not live operational failure, so they are not part of the /api/issues stream. They surface per-resource: the PolicyReport detail view (above) and the resourceContext policy rollup on a resource fetched via get_resource. (The cluster audit - /api/audit + MCP get_cluster_audit - is radar’s own static best-practice scanner and does not include PolicyReport results.)