Generate Kyverno policies for FinOps cost governance on Kubernetes, based on real cost data from OpenCost. Queries OpenCost MCP server to identify over-provisioned namespaces, missing cost-allocation labels, and budget drift. Generates targeted policies: tiered resource limits, cost-allocation labels, over-provisioning guards. Use when user says "finops", "cost governance", "analyze cluster costs", "optimize cluster costs", "resource limits by environment", "cost allocation labels", "prevent over-provisioning", or mentions cost-center, chargeback, or cloud cost optimization. Requires OpenCost MCP server connected. Do NOT use for general Kyverno policy generation (use kyverno-policy-generator) or policy auditing (use kyverno-policy-auditor).
Audit existing Kyverno policies against best practices and production standards. Analyzes annotations, autogen compatibility, safe defaults, pattern correctness, and test coverage. Produces a conformity report with scores and remediation steps. Use when user says "audit my policies", "review this policy", "check my Kyverno YAML", "analyze policy quality", "policy conformity report", "are my policies compliant", or asks about policy best practices, missing annotations, or governance gaps. Do NOT use for creating new policies (use kyverno-policy-generator instead).
Generate production-ready Kyverno policies from natural language. Creates validate, mutate, generate, and verifyImages policies with Chainsaw tests and kubectl-ready output. Use when user says "create Kyverno policy", "enforce resource limits", "block privileged containers", "restrict image registries", "require labels", "policy-as-code", "admission controller", "Kubernetes governance", or mentions Kyverno, ClusterPolicy, compliance, or cluster security. Do NOT use for general Kubernetes troubleshooting or non-policy YAML generation.