Kubewarden
Change the repository type filter
All
Repositories list
96 repositories
- Workflow to rebuild and sign rancher/kubectl image
- Webhook server that evaluates WebAssembly policies to validate Kubernetes requests
- Crate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.
- Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.
- Manage admission policies in your Kubernetes cluster with ease
- Reports evaluation of existing Kubernetes resources with your already deployed Kubewarden policies.
- Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context
kwctl
PublicGo-to CLI tool for Kubewarden users- Kubewarden's documentation
- A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables
- A template repository to quickly port a Open Policy Agent policy to Kubewarden
- GitHub actions used by the Kubewarden project
- A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation
- A template repository to quickly port a Gatekeeper policy to Kubewarden
- A Kubewarden Policy that controls the usage of environment variables
- Kubewarden policy that ensures that namespaces have the required PSA labels
pod-ndots-policy
PublicPolicy that enforces the usage of ndots in the pod's DNS configuration- This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups
- Demo policy showing how to write a raw validating policy
- Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux
- A Kubewarden policy that enforces root filesystem to be readonly
- Policy that validates and adjusts the usage of StorageClasses in PersistentVolumeClaims
- Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces
- Policy validates pods sharing processes PID namespace
- A policy that prevents the creation of Service resources with type LoadBalancer
- A policy that prevents the creation of Service resources with type NodePort
- Prevent the creation of Ingress resources with duplicated hosts
- A Kubewarden Policy that controls the usage of `volumeMounts`