naftiko: 1.0.0-alpha2 info: label: Kyverno Policy Reporter API — Policies description: 'Kyverno Policy Reporter API — Policies. 4 operations. Lead operation: Kyverno List policy categories. Self-contained Naftiko capability covering one Kyverno business surface.' tags: - Kyverno - Policies created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: KYVERNO_API_KEY: KYVERNO_API_KEY capability: consumes: - type: http namespace: policy-reporter-policies baseUri: http://localhost:8080 description: Kyverno Policy Reporter API — Policies business capability. Self-contained, no shared references. resources: - name: api-v1-categories path: /api/v1/categories operations: - name: listcategories method: GET description: Kyverno List policy categories outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-v1-policies path: /api/v1/policies operations: - name: listpolicies method: GET description: Kyverno List policies outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-v1-rules path: /api/v1/rules operations: - name: listrules method: GET description: Kyverno List policy rules outputRawFormat: json outputParameters: - name: result type: object value: $. - name: api-v1-targets path: /api/v1/targets operations: - name: listtargets method: GET description: Kyverno List notification targets outputRawFormat: json outputParameters: - name: result type: object value: $. exposes: - type: rest namespace: policy-reporter-policies-rest port: 8080 description: REST adapter for Kyverno Policy Reporter API — Policies. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/api/v1/categories name: api-v1-categories description: REST surface for api-v1-categories. operations: - method: GET name: listcategories description: Kyverno List policy categories call: policy-reporter-policies.listcategories outputParameters: - type: object mapping: $. - path: /v1/api/v1/policies name: api-v1-policies description: REST surface for api-v1-policies. operations: - method: GET name: listpolicies description: Kyverno List policies call: policy-reporter-policies.listpolicies outputParameters: - type: object mapping: $. - path: /v1/api/v1/rules name: api-v1-rules description: REST surface for api-v1-rules. operations: - method: GET name: listrules description: Kyverno List policy rules call: policy-reporter-policies.listrules outputParameters: - type: object mapping: $. - path: /v1/api/v1/targets name: api-v1-targets description: REST surface for api-v1-targets. operations: - method: GET name: listtargets description: Kyverno List notification targets call: policy-reporter-policies.listtargets outputParameters: - type: object mapping: $. - type: mcp namespace: policy-reporter-policies-mcp port: 9090 transport: http description: MCP adapter for Kyverno Policy Reporter API — Policies. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: kyverno-list-policy-categories description: Kyverno List policy categories hints: readOnly: true destructive: false idempotent: true call: policy-reporter-policies.listcategories outputParameters: - type: object mapping: $. - name: kyverno-list-policies description: Kyverno List policies hints: readOnly: true destructive: false idempotent: true call: policy-reporter-policies.listpolicies outputParameters: - type: object mapping: $. - name: kyverno-list-policy-rules description: Kyverno List policy rules hints: readOnly: true destructive: false idempotent: true call: policy-reporter-policies.listrules outputParameters: - type: object mapping: $. - name: kyverno-list-notification-targets description: Kyverno List notification targets hints: readOnly: true destructive: false idempotent: true call: policy-reporter-policies.listtargets outputParameters: - type: object mapping: $.