Why should I use JMESPath instead of standard Kyverno patterns?

Use JMESPath when your logic requires conditionals, transformations, or cross-field validation that simple pattern matching cannot express.

Can this skill help enforce container resource limits?

Yes, it provides specific patterns for filtering containers without memory or CPU limits and implementing denial logic based on those results.

How do I test my JMESPath expressions before deploying?

This skill recommends using the 'kyverno jp' CLI tool to test queries against your local manifests to ensure syntax accuracy and avoid silent failures.

Does this skill support array transformations?

Absolutely. It excels at filtering arrays, extracting specific fields from multiple objects, and calculating lengths for validation checks.

Kyverno JMESPath Master

Name: Kyverno JMESPath Master
Author: adaptive-enforcement-lab

byadaptive-enforcement-lab

0•

Deployment & DevOps

Simplifies the creation and validation of complex Kyverno policies using production-tested JMESPath patterns for Kubernetes.

This skill empowers developers to go beyond basic pattern matching in Kyverno by mastering JMESPath for advanced Kubernetes policy enforcement. It provides specialized guidance for querying nested resource data, implementing complex conditional logic, and performing cross-field validations that standard Kyverno patterns cannot handle. By integrating CLI testing best practices and production-ready implementation patterns, it ensures your policies are both powerful and safe to deploy in production environments.

Key Features

01Integration with Kyverno CLI for expression testing and debugging

020 GitHub stars

03Array filtering and comparison techniques for multi-container pods

04Cross-field validation patterns for robust workload security

05Advanced JMESPath query construction for nested Kubernetes resources

06Implementation of complex conditional logic and data transformations

Use Cases

01Enforcing specific labeling conventions based on existing resource attributes

02Validating resource limits across all containers in a deployment

03Filtering and auditing Kubernetes workloads with complex nested configurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add adaptive-enforcement-lab/claude-skills jmespath-for-kyverno

For use in Claude.ai and ChatGPT

Download Skill