Compatibility with vSphere tooling
The vSphere-compatible endpoints of Kyvernon and the tools verified against them: PowerCLI, govc, Terraform, Ansible and monitoring.
The controller serves endpoints that tools written for the vSphere API connect to. Existing scripts, configurations and inventories keep their form: you change the address of the server and the credentials.
Compatibility overview describes the endpoints, sessions, object references and what an unsupported method returns. The settings that turn the endpoints on are in Settings of the compatibility endpoints.
Per tool:
The generated reference lists every supported method and the operations that each verified tool ran: supported vSphere API methods and verified tools. Only tools and operations in that list are stated as verified.
- Compatibility overviewThe vSphere-compatible endpoints, how sessions, object references and tasks map to Kyvernon, and what a method that is not served returns.
- PowerCLIConnect PowerCLI to the controller, the cmdlets that were verified against Kyvernon and the known gaps.
- govcSet the environment of govc for the controller, the commands that were verified against Kyvernon and the known gaps.
- Terraform vSphere providerConfigure the Terraform vSphere provider for the controller, the resources that were verified against Kyvernon and the known gaps, including tags.
- AnsibleUse the community.vmware, vmware.vmware and vmware.vmware_rest collections with the controller, the modules that were verified and the known gaps.
- Monitoring toolsConnect Telegraf, the Prometheus vmware_exporter and Zabbix to the controller through the vSphere endpoints and what was verified for each.
- Backup software and the vSphere APIWhich parts of the vSphere backup workflow Kyvernon serves, how the disk data is read instead, and how backup software integrates.
- Settings of the compatibility endpointsThe controller settings that turn on the vSphere-compatible endpoints, set the product name, the session time and the addresses that clients are given.
- NSX Policy API subsetThe part of the NSX Policy API that Kyvernon serves for the distributed firewall: paths, objects, mapping to firewall objects, differences and gaps.
Version 0.1. Last changed: 2026-11-13