kyverno-kyvernopre

What is kyverno-kyvernopre?

The Kyverno Kyvernopre image is a companion component in the Kyverno ecosystem. While the main Kyverno controller enforces, mutates, and generates policies in Kubernetes, the Kyvernopre image focuses on pre-processing logic needed to evaluate certain policies.

It is often used for specialized workflows where Kyverno policies require additional parsing, validation, or handling before the main controller executes enforcement. This separation helps improve performance and keeps the core Kyverno controller streamlined.

Kyvernopre plays a role in scaling Kyverno deployments by offloading some of the policy preparation steps, especially in clusters with large numbers of policies or frequent resource changes.

How to use this image

The Kyvernopre image is typically run as a sidecar or as part of the Kyverno controller’s supporting pods in Kubernetes.

Examples:

<code># Deploy Kyverno including kyvernopre as part of the standard install
kubectl create -f https://raw.githubusercontent.com/kyverno/kyverno/main/config/release/install.yaml</code>

<code># Verify kyvernopre pod is running
kubectl get pods -n kyverno</code>

Most users will not run kyvernopre directly. Instead, it is deployed automatically when installing Kyverno via manifests or Helm charts.

{{cta2}}

Image variants

The Kyverno Kyvernopre image is typically released under ghcr.io/kyverno/kyvernopre in these forms:

kyvernopre:<version>

Version-pinned images (e.g., kyvernopre:v1.12.0) are recommended for production clusters.

kyvernopre:latest

Tracks the most recent stable release. Useful for testing but not recommended for production.

kyvernopre:nightly / dev

Built from the development branch. Intended for contributors or teams testing experimental features.