Kyverno 1.18 Released with Enhanced Security and CLI Features
The Cloud Native Computing Foundation (CNCF) has announced the release of Kyverno 1.18, marking the first update since the project graduated within the foundation. This version significantly strengthens Kyverno’s role as a Kubernetes-native policy engine by focusing on security, command-line interface (CLI) capabilities, and engine reliability. Key security improvements include hardened HTTP-based policy execution to prevent SSRF-style abuses and scoped token authorization to mitigate impersonation risks, addressing specific CVEs. The CLI now supports modern policy types like cleanup and Envoy authorization policies, enhancing local testing and CI pipeline integration. Additionally, the release introduces fine-grained success event filtering for better observability in large environments and performance upgrades such as memory-based HPA autoscaling. While there are no breaking changes, the update continues the transition toward CEL-based policy types, urging users to migrate from deprecated ClusterPolicies. These enhancements aim to provide a more secure, scalable, and developer-friendly experience for managing Kubernetes policies.
Wire timeline
Kyverno 1.18 Released with Enhanced Security and CLI Features
The Cloud Native Computing Foundation (CNCF) has announced the release of Kyverno 1.18, marking the first update since the project graduated within the foundation. This version significantly strengthens Kyverno’s role as a Kubernetes-native policy engine by focusing on security, command-line interface (CLI) capabilities, and engine reliability. Key security improvements include hardened HTTP-based policy execution to prevent SSRF-style abuses and scoped token authorization to mitigate impersonation risks, addressing specific CVEs. The CLI now supports modern policy types like cleanup and Envoy authorization policies, enhancing local testing and CI pipeline integration. Additionally, the release introduces fine-grained success event filtering for better observability in large environments and performance upgrades such as memory-based HPA autoscaling. While there are no breaking changes, the update continues the transition toward CEL-based policy types, urging users to migrate from deprecated ClusterPolicies. These enhancements aim to provide a more secure, scalable, and developer-friendly experience for managing Kubernetes policies.
Blog – Cloud Native Computing Foundation