k8s-kyverno-troubleshooting
Use when Kyverno blocks, changes or fails to police resources in Kubernetes: "admission webhook \"validate.kyverno.svc-fail\" denied the request", "resource ... was blocked due to the following policies", "Policy ... failed" from a ValidatingPolicy, a policy that should block but only reports (Audit), PolicyReports with failures, a policy that is not Ready, mutate or generate rules that do nothing, UpdateRequests stuck, or "failed calling webhook" for kyverno when its pods are down. Covers ClusterPolicy and Policy (kyverno.io) and the CEL policies (policies.kyverno.io). Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
- License
- Apache-2.0
Pinned to revision ce7de97330d7, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/k8s-kyverno-troubleshooting/SKILL.md
- skills/k8s-kyverno-troubleshooting/.claude-plugin/plugin.json
- skills/k8s-kyverno-troubleshooting/references/mutate-and-generate.md
- skills/k8s-kyverno-troubleshooting/references/validation.md
- skills/k8s-kyverno-troubleshooting/references/webhooks-and-controllers.md
Every link opens the file at its source, pinned to the revision this page describes.