Kubewarden

All

98 repositories

kubecon-24-eu-kubewarden
Public
Experiment for Kubewarden booth at Kubecon EU 2024
JavaScript
•
Apache License 2.0
•2•2•1•22•Updated Mar 3, 2025Mar 3, 2025
docs
Public
Kubewarden's documentation
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security
JavaScript
•
Creative Commons Attribution 4.0 International
•23•13•19•2•Updated Mar 3, 2025Mar 3, 2025
kwctl
Public
Go-to CLI tool for Kubewarden users
webassembly hacktoberfest policy-as-code kubernetes-security kubernetes
Rust
•
Apache License 2.0
•18•77•18•1•Updated Mar 3, 2025Mar 3, 2025
policy-evaluator
Public
Crate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.
hacktoberfest
Rust
•
Apache License 2.0
•8•15•22•3•Updated Mar 3, 2025Mar 3, 2025
readonly-root-filesystem-psp-policy
Public
A Kubewarden policy that enforces root filesystem to be readonly
kubernetes webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•3•2•3•1•Updated Mar 3, 2025Mar 3, 2025
policy-fetcher
Public
Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security
Rust
•
Apache License 2.0
•8•8•6•0•Updated Mar 3, 2025Mar 3, 2025
host-namespaces-psp-policy
Public
Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces
kubernetes webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•4•1•3•0•Updated Mar 3, 2025Mar 3, 2025
rego-policies-library
Public
A collection of Rego policies that can be used to enforce best practices in Kubernetes clusters
kubernetes webassembly compliance gatekeeper hacktoberfest policy-as-code rego kubernetes-security kubewarden-policy
Open Policy Agent
•
Apache License 2.0
•3•1•1•1•Updated Mar 3, 2025Mar 3, 2025
unique-service-selector-policy
Public
Policy validates that there are no services with the same set of selectors
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•1•0•1•0•Updated Mar 3, 2025Mar 3, 2025
echo
Public
A Kubewarden Policy that echoes Kubernetes' AdmissionReview objects
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•3•1•1•0•Updated Mar 3, 2025Mar 3, 2025
sleeping-policy
Public
A test policy that simulates long running policy evaluations
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•2•0•1•0•Updated Mar 3, 2025Mar 3, 2025
seccomp-psp-policy
Public
A Kubewarden Pod Security Policy that controls usage of Seccomp profiles
kubernetes webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•4•4•3•0•Updated Mar 3, 2025Mar 3, 2025
deprecated-api-versions-policy
Public
A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•4•15•1•0•Updated Mar 3, 2025Mar 3, 2025
fleet-example
Public
Example of Rancher Fleet bundle for Kubewarden
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security
Creative Commons Attribution 4.0 International
•3•1•2•0•Updated Mar 3, 2025Mar 3, 2025
share-pid-namespace-policy
Public
Policy validates pods sharing processes PID namespace
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•1•0•1•0•Updated Mar 3, 2025Mar 3, 2025
allow-privilege-escalation-psp-policy
Public
A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation
webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy kubernetes
Rust
•
Apache License 2.0
•7•6•2•0•Updated Mar 3, 2025Mar 3, 2025
apparmor-psp-policy
Public
A Kubewarden Pod Security Policy that controls usage of AppArmor profiles
webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy kubernetes
Rust
•
Apache License 2.0
•4•6•3•0•Updated Mar 3, 2025Mar 3, 2025
psa-label-enforcer-policy
Public
Kubewarden policy that ensures that namespaces have the required PSA labels
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•3•1•1•0•Updated Mar 3, 2025Mar 3, 2025
automation
Public
Automation scripts for the management of the Kubewarden organization on GitHub
hacktoberfest
HCL
•
Apache License 2.0
•4•3•2•0•Updated Mar 3, 2025Mar 3, 2025
environment-variable-policy
Public
A Kubewarden Policy that controls the usage of environment variables
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•2•2•2•0•Updated Mar 3, 2025Mar 3, 2025
opa-policy-template
Public template
A template repository to quickly port a Open Policy Agent policy to Kubewarden
kubernetes webassembly opa hacktoberfest open-policy-agent openpolicyagent policy-as-code kubernetes-security kubewarden-policy-template
Makefile
•
Apache License 2.0
•1•4•1•0•Updated Mar 3, 2025Mar 3, 2025
allowed-proc-mount-types-psp-policy
Public
Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types
webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy kubernetes
Rust
•
Apache License 2.0
•5•7•3•0•Updated Mar 3, 2025Mar 3, 2025
raw-validation-policy
Public
Demo policy showing how to write a raw validating policy
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•1•0•1•0•Updated Mar 3, 2025Mar 3, 2025
rancher-project-propagate-labels
Public
Propagate Rancher Project labels to the Namespaces it owns
Rust
•
Apache License 2.0
•3•3•1•0•Updated Mar 3, 2025Mar 3, 2025
verify-image-signatures
Public
A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod
kubernetes webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•9•13•2•0•Updated Mar 3, 2025Mar 3, 2025
gatekeeper-policy-template
Public template
A template repository to quickly port a Gatekeeper policy to Kubewarden
kubernetes webassembly gatekeeper hacktoberfest policy-as-code rego kubernetes-security gatekeeper-policies gatekeeper-v2 kubewarden-policy-template
Makefile
•1•1•1•0•Updated Mar 3, 2025Mar 3, 2025
disallow-service-loadbalancer-policy
Public
A policy that prevents the creation of Service resources with type LoadBalancer
kubernetes webassembly gatekeeper hacktoberfest open-policy-agent policy-as-code kubernetes-security kubewarden-policy
Makefile
•
Apache License 2.0
•2•2•1•0•Updated Mar 3, 2025Mar 3, 2025
selinux-psp-policy
Public
Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux
kubernetes webassembly hacktoberfest policy-as-code pod-security-policy kubernetes-security kubewarden-policy
Rust
•
Apache License 2.0
•3•1•3•0•Updated Mar 3, 2025Mar 3, 2025
raw-validation-opa-policy
Public
Demo policy showing how to write a raw OPA validating policy
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy
Shell
•
Apache License 2.0
•1•0•1•0•Updated Mar 3, 2025Mar 3, 2025
context-aware-demo
Public
A demo policy showing how to access Kubernetes resources at policy evaluation time
webassembly hacktoberfest policy-as-code kubernetes-security kubewarden-policy kubernetes
Rust
•
Apache License 2.0
•2•1•1•0•Updated Mar 3, 2025Mar 3, 2025