Kyverno annotations

This page is a list of annotations reserved for Kyverno system use.

Policy Classification Annotations

These annotations are used to classify sample policies primarily for use by the Kyverno website and, more specifically, the filtering logic on the policies page.

• policies.kyverno.io/title

  • (Optional) The title of the policy for documentation page rendering.

• policies.kyverno.io/category

  • Category the policy fits in.

• policies.kyverno.io/minversion

  • Minimum version of Kyverno where this policy works.

• policies.kyverno.io/description

  • Description of the policy.

Policy Report Annotations

• policies.kyverno.io/severity
  • Sets the severity in a policy report.

Functional Annotations

These annotations Kyverno uses internally for some logic.

• pod-policies.kyverno.io/autogen-controllers
  • Sets the Kubernetes controllers which should be applied to the rule. See the documentation for details.

Needed annotations:

• metadata/labels/tags
  • For tagging purposes in future