{
  "id": "tool:kyverno",
  "_kind": "Tool",
  "_file": "domain/products/krate.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Kyverno",
    "homepageUrl": "https://kyverno.io/",
    "kind": "policy-engine",
    "description": "Kubernetes-native policy engine that uses admission webhooks to\nvalidate, mutate, and generate resources based on declarative\npolicies written as Kubernetes CRDs. Unlike OPA/Gatekeeper which\nrequires learning Rego, Kyverno policies are expressed as familiar\nYAML with pattern matching and overlay semantics. In Krate,\nKyverno enforces org-level PolicyProfiles — controlling which\ncontainer images agents can use, what RBAC bindings are permitted,\nresource quota enforcement, and security baseline compliance.\nSupports policy reports, background scanning, and exception\nmanagement.\n"
  },
  "outgoingEdges": [
    {
      "from": "tool:kyverno",
      "to": "language:go",
      "kind": "belongs_to_language"
    },
    {
      "from": "tool:kyverno",
      "to": "skill-area:policy-as-code",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:kyverno",
      "to": "skill-area:platform-engineering",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:kyverno",
      "to": "skill-area:container-security",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:kyverno",
      "to": "tool:grafana",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Not alternatives — Kyverno is policy enforcement; Grafana is observability"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "tool:kyverno",
      "kind": "depends_on"
    },
    {
      "from": "platform:krate",
      "to": "tool:kyverno",
      "kind": "integrates_with",
      "attributes": {
        "notes": "Policy engine enforcing org-level policy profiles"
      }
    },
    {
      "from": "platform-service:krate-policy",
      "to": "tool:kyverno",
      "kind": "integrates_with",
      "attributes": {}
    },
    {
      "from": "stack-profile:krate-platform",
      "to": "tool:kyverno",
      "kind": "composed_of"
    },
    {
      "from": "definition:krate-policy-model",
      "to": "tool:kyverno",
      "kind": "supports"
    }
  ]
}