diff --git a/charts/kubezero-addons/Chart.yaml b/charts/kubezero-addons/Chart.yaml
index 99744e70..a9c43899 100644
--- a/charts/kubezero-addons/Chart.yaml
+++ b/charts/kubezero-addons/Chart.yaml
@@ -3,7 +3,7 @@ name: kubezero-addons
 description: KubeZero umbrella chart for various optional cluster addons
 type: application
 version: 0.8.15
-appVersion: v1.31
+appVersion: v1.32
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
 keywords:
@@ -54,4 +54,4 @@ dependencies:
     version: 0.3.2
     repository: https://caas-team.github.io/helm-charts/
     condition: py-kube-downscaler.enabled
-kubeVersion: ">= 1.30.0-0"
+kubeVersion: ">= 1.31.0-0"
diff --git a/charts/kubezero-addons/README.md b/charts/kubezero-addons/README.md
index a98d6129..5ac71fcb 100644
--- a/charts/kubezero-addons/README.md
+++ b/charts/kubezero-addons/README.md
@@ -1,6 +1,6 @@
 # kubezero-addons
 
-![Version: 0.8.14](https://img.shields.io/badge/Version-0.8.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.31](https://img.shields.io/badge/AppVersion-v1.31-informational?style=flat-square)
+![Version: 0.8.15](https://img.shields.io/badge/Version-0.8.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.32](https://img.shields.io/badge/AppVersion-v1.32-informational?style=flat-square)
 
 KubeZero umbrella chart for various optional cluster addons
 
@@ -14,7 +14,7 @@ KubeZero umbrella chart for various optional cluster addons
 
 ## Requirements
 
-Kubernetes: `>= 1.30.0-0`
+Kubernetes: `>= 1.31.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
@@ -24,8 +24,8 @@ Kubernetes: `>= 1.30.0-0`
 | https://kubernetes.github.io/autoscaler | cluster-autoscaler | 9.46.6 |
 | https://nvidia.github.io/k8s-device-plugin | nvidia-device-plugin | 0.17.1 |
 | https://twin.github.io/helm-charts | aws-eks-asg-rolling-update-handler | 1.5.0 |
-| oci://public.ecr.aws/aws-ec2/helm | aws-node-termination-handler | 0.27.0 |
-| oci://public.ecr.aws/neuron | neuron-helm-chart | 1.1.1 |
+| oci://public.ecr.aws/aws-ec2/helm | aws-node-termination-handler | 0.27.1 |
+| oci://public.ecr.aws/neuron | neuron-helm-chart | 1.1.2 |
 
 # MetalLB   
    
diff --git a/charts/kubezero-addons/charts/aws-node-termination-handler/Chart.yaml b/charts/kubezero-addons/charts/aws-node-termination-handler/Chart.yaml
index 99a179e7..aeaa0682 100644
--- a/charts/kubezero-addons/charts/aws-node-termination-handler/Chart.yaml
+++ b/charts/kubezero-addons/charts/aws-node-termination-handler/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.25.0
+appVersion: 1.25.1
 description: A Helm chart for the AWS Node Termination Handler.
 home: https://github.com/aws/aws-node-termination-handler/
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
@@ -21,4 +21,4 @@ name: aws-node-termination-handler
 sources:
 - https://github.com/aws/aws-node-termination-handler/
 type: application
-version: 0.27.0
+version: 0.27.1
diff --git a/charts/kubezero-policy/Chart.yaml b/charts/kubezero-policy/Chart.yaml
new file mode 100644
index 00000000..386fcf60
--- /dev/null
+++ b/charts/kubezero-policy/Chart.yaml
@@ -0,0 +1,20 @@
+apiVersion: v2
+name: kubezero-policy
+description: KubeZero umbrella chart for Kyverno
+type: application
+version: 0.1.0
+appVersion: v1.14
+home: https://kubezero.com
+icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
+keywords:
+  - kubezero
+  - kyverno
+maintainers:
+  - name: Stefan Reimer
+    email: stefan@zero-downtime.net
+dependencies:
+  - name: kyverno
+    version: 3.4.2
+    repository: https://kyverno.github.io/kyverno/
+    condition: kyverno.enabled
+kubeVersion: ">= 1.30.0-0"
diff --git a/charts/kubezero-policy/README.md b/charts/kubezero-policy/README.md
new file mode 100644
index 00000000..326d9fbe
--- /dev/null
+++ b/charts/kubezero-policy/README.md
@@ -0,0 +1,29 @@
+# kubezero-policy
+
+![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.14](https://img.shields.io/badge/AppVersion-v1.14-informational?style=flat-square)
+
+KubeZero umbrella chart for Kyverno
+
+**Homepage:** <https://kubezero.com>
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| Stefan Reimer | <stefan@zero-downtime.net> |  |
+
+## Requirements
+
+Kubernetes: `>= 1.30.0-0`
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://kyverno.github.io/kyverno/ | kyverno | 3.4.2 |
+
+# Kyverno
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| kyverno.enabled | bool | `false` |  |
diff --git a/charts/kubezero-policy/README.md.gotmpl b/charts/kubezero-policy/README.md.gotmpl
new file mode 100644
index 00000000..11858378
--- /dev/null
+++ b/charts/kubezero-policy/README.md.gotmpl
@@ -0,0 +1,18 @@
+{{ template "chart.header" . }}
+{{ template "chart.deprecationWarning" . }}
+
+{{ template "chart.versionBadge" . }}{{ template "chart.typeBadge" . }}{{ template "chart.appVersionBadge" . }}
+
+{{ template "chart.description" . }}
+
+{{ template "chart.homepageLine" . }}
+
+{{ template "chart.maintainersSection" . }}
+
+{{ template "chart.sourcesSection" . }}
+
+{{ template "chart.requirementsSection" . }}
+
+# Kyverno
+
+{{ template "chart.valuesSection" . }}
diff --git a/charts/kubezero-policy/update.sh b/charts/kubezero-policy/update.sh
new file mode 100755
index 00000000..3f7c5736
--- /dev/null
+++ b/charts/kubezero-policy/update.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+set -ex
+
+. ../../scripts/lib-update.sh
+
+login_ecr_public
+update_helm
+
+update_docs
diff --git a/charts/kubezero-policy/values.yaml b/charts/kubezero-policy/values.yaml
new file mode 100644
index 00000000..5729b9fb
--- /dev/null
+++ b/charts/kubezero-policy/values.yaml
@@ -0,0 +1,2 @@
+kyverno:
+  enabled: false