Kyverno SDK is a Go library that provides programmatic access to Kyverno policy validation and mutation capabilities.
The SDK solves the problem of integrating Kyverno's policy engine into applications and tools that need to validate or mutate Kubernetes resources without running a full Kyverno controller. It exposes the core policy evaluation logic through a Go API, allowing developers to embed policy enforcement directly into their workflows, CLIs, or custom tooling. The approach works by packaging Kyverno's validation and mutation engine as a reusable library that can be imported and called from Go applications.
Adoption makes sense for teams building Kubernetes-adjacent tools, testing frameworks, or CI/CD integrations that need to enforce Kyverno policies programmatically. It suits projects where you want policy validation as a library component rather than as a cluster service. This is particularly valuable for developers building policy-as-code tooling, admission webhooks, or policy testing utilities who want to leverage Kyverno's policy language and evaluation engine without the operational overhead of running Kyverno controllers.
The project shows active development with regular commits addressing bug fixes and feature additions. Work spans multiple areas including core policy evaluation logic, test coverage expansion, and dependency management. The maintainers respond to issues and pull requests, indicating ongoing engagement with the user base. Development activity reflects a focus on stability and correctness of the policy evaluation engine rather than rapid feature expansion.
