Issues

• [Sample] KubeVirt: restrict VM secondary networks to the VM's own namespace

  kyverno/policies#1739 · Filter by author Suhani95 opened on Nov 12, 2026

• [Sample] KubeVirt: require secure HTTP sources for DataVolume imports

  kyverno/policies#1734 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Linkerd: restrict annotations that let traffic bypass the proxy

  kyverno/policies#1733 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Istio: require the port variant for AuthorizationPolicy host matches

  kyverno/policies#1731 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Istio: disallow insecureSkipVerify in DestinationRules

  kyverno/policies#1728 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Istio: require https for RequestAuthentication JWKS URLs

  kyverno/policies#1726 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Argo CD: restrict ApplicationSet SCM generators to trusted namespaces

  kyverno/policies#1724 · Filter by author Suhani95 opened on Nov 11, 2026

• [Sample] Argo CD: restrict AppProject destinations

  kyverno/policies#1722 · Filter by author Suhani95 opened on Nov 10, 2026

• [Bug] require-drop-cap-net-raw (VPOL) fails containers that drop ALL capabilities

  kyverno/policies#1720 · Filter by author Demivan opened on Nov 10, 2026

• [Sample] Argo CD: restrict AppProject source namespaces

  kyverno/policies#1718 · Filter by author Suhani95 opened on Nov 10, 2026

• Port creation tracking and OpenShift policies, and restore legacy PSA, Velero, and Cosign behavior

  kyverno/policies#1699 · Filter by author Suhani95 opened on Nov 4, 2026
  1

  

• Port Kasten and Kubeops config-syncer policies; restore Karpenter and KubeVirt trigger coverage

  kyverno/policies#1698 · Filter by author Suhani95 opened on Nov 4, 2026
  1

  

• Port Istio, Flux, External Secrets, and quota policies; fix safe-to-evict and ReplicaSet cleanup

  kyverno/policies#1697 · Filter by author Suhani95 opened on Nov 4, 2026
  2

  

• Port PSA, PSP migration, Traefik, Velero, and Windows validation policies to ValidatingPolicy

  kyverno/policies#1696 · Filter by author Suhani95 opened on Nov 4, 2026

• Port AWS, Consul, Kubecost, KubeVirt, and NGINX Ingress validation policies to ValidatingPolicy

  kyverno/policies#1695 · Filter by author Suhani95 opened on Nov 4, 2026

• Port Tekton TaskRun, bundle, Namespace, and step security policies to ValidatingPolicy

  kyverno/policies#1694 · Filter by author Suhani95 opened on Nov 4, 2026
  2

  

• Port Tekton bundle signature and TaskRun scan verification to ImageValidatingPolicy

  kyverno/policies#1693 · Filter by author Suhani95 opened on Nov 4, 2026
  1

  

• Restore Pod-only scope in AppArmor, capabilities, and runtimeClassName migration policies

  kyverno/policies#1692 · Filter by author Suhani95 opened on Nov 4, 2026

• Port service mesh and PSP capability exceptions, and check restricted Pod Security ports

  kyverno/policies#1691 · Filter by author Suhani95 opened on Nov 4, 2026

• Check baseline Pod Security ports for capabilities, host ports, SELinux, and seccomp

  kyverno/policies#1690 · Filter by author Suhani95 opened on Nov 4, 2026
  1

• Port uniqueness, Pod count, and scale limit policies to ValidatingPolicy

  Contribfest
  kyverno/policies#1689 · Filter by author Suhani95 opened on Nov 4, 2026
  4

  

• Port PDB, NetworkPolicy, HPA, and staging lookup policies to ValidatingPolicy

  kyverno/policies#1688 · Filter by author Suhani95 opened on Nov 4, 2026

• Port RBAC, image trust, PolicyException, and time-window policies to ValidatingPolicy

  Contribfest
  kyverno/policies#1687 · Filter by author Suhani95 opened on Nov 4, 2026

• Port label, Node, freeze, and PDB percentage policies to ValidatingPolicy

  Contribfest
  kyverno/policies#1686 · Filter by author Suhani95 opened on Nov 4, 2026
  1

  

• Improve migrated registry, storage, QoS, RBAC, and ingress policies

  kyverno/policies#1685 · Filter by author Suhani95 opened on Nov 4, 2026