kyverno 1.17.1

Kyverno is a policy engine designed for Kubernetes.

  • By kyverno
  • Open Source
  • Updated Feb 19, 2026
Download for Windows

About kyverno

Kyverno is a policy engine designed for Kubernetes.
It can validate, mutate, and generate configurations using admission controls and background scans.
Kyverno policies are Kubernetes resources and do not require learning a new language.
Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.

What's new in 1.17.1

What's Changed

  • chore: remove Nirmata refs (Cherry-pick #15114) by @kyverno-bot in #15115
  • cli: simplify namespaced policy loading in CLI (Cherry-pick #15118) by @kyverno-bot in #15122
  • fix: panic in metrics wrapper when generating response does not provide a result (Cherry-pick #15105) by @kyverno-bot in #15117
  • fix: init dclient before using it (Cherry-pick #15172) by @kyverno-bot in #15173
  • populate registry consistently (Cherry-pick #14632) by @kyverno-bot in #15184
  • fix: eliminate memcache error spam from fake client discovery polling (Cherry-pick #15187) by @kyverno-bot in #15193
  • fix: restmapper for fakeclient (cherry-pick #15177) by @realshuting in #15194
  • cherry pick #0ffed6f by @fjogeleit in #15206
  • fix: CVE-2025-68121 (Cherry-pick #15203) by @kyverno-bot in #15212
  • fix: enable signed timestamp verification when TSA cert chain is provided (Cherry-pick #15192) by @kyverno-bot in #15217
  • fix: add default message for ValidatingPolicy when message field is empty (Cherry-pick #13630) by @kyverno-bot in #15267
  • fix: return errors from syncPolicy to enable workqueue retry (Cherry-pick #15082) by @kyverno-bot in #15268
  • fix: skip side effects on dry-run in gpol/mpol (Cherry-pick #15143) by @kyverno-bot in #15270
  • fix(ivpol): Unauthorized error when using a private repository (Cherry-pick #15136) by @kyverno-bot in #15271
  • fix(charts): add missing endpointslices list permission to cleanup controller role (Cherry-pick #15140) by @kyverno-bot in #15272
  • fix(admissionpolicygenerator): enqueue exceptions (Cherry-pick #15038) by @kyverno-bot in #15274
  • changed default value and helm values documentation from integer to duration string (Cherry-pick #15124) by @kyverno-bot in #15275
  • fix: nil pointer dereference in Certificates branch of manifest valid… (Cherry-pick #15152) by @kyverno-bot in #15276
  • Fix Empty list in policy exclusion result in excluding all resources (Cherry-pick #13794) by @kyverno-bot in #15277
  • fix: imageVerify Multi-Signature Annotation Validation Bug (Cherry-pick #14500) by @kyverno-bot in #15279
  • Fix Chainsaw test for MutatingPolicy add-label-applyconfiguration (Cherry-pick #14587) by @kyverno-bot in #15282
  • chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (Cherry-pick #15164) by @kyverno-bot in #15278
  • fix(ivpol): use Kyverno namespace secrets in reports scanner (Cherry-pick #15220) by @kyverno-bot in #15287
  • chore: run unit tests in verbose mode (cherry-pick #15230) by @eddycharly in #15288 …

Full release notes »

Technical details

Publisherkyverno
Version1.17.1
Release date2026-02-19
LicenseApache-2.0
Installer typezip
Architecturex64, arm64
Package IDkyverno.kyverno

Install kyverno from the command line

Install with Windows Package Manager
winget install --id=kyverno.kyverno -e
Update to the latest version
winget upgrade --id=kyverno.kyverno -e
Uninstall
winget uninstall --id=kyverno.kyverno -e

k8skubernetes

kyverno version history

  • 1.13.4
  • 1.12.4
  • 1.11.3
  • 1.11.1
  • 1.10.6

Frequently asked questions

Is kyverno free?

Yes. kyverno is free and open-source software released under the Apache-2.0 license.

What is the latest version of kyverno?

The latest version is 1.17.1, released on Feb 19, 2026.

Is it safe to download kyverno?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with f74d4841916946076b9f56475696c29426e5e0ba8177d82bcfca3fcd5506cdd9.

Which Windows versions does kyverno support?

kyverno runs on Windows and is available for 64-bit (x64), ARM64 systems.

How do I uninstall kyverno?

Open Settings › Apps › Installed apps, find kyverno and select Uninstall. From the command line, run winget uninstall --id=kyverno.kyverno -e.