Kubewarden
Change the repository type filter
All
Repositories list
96 repositories
- A policy that can run CEL expressions
- Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context
- Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types
- A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod
- Policy that enforces the usage of ndots in the pod's DNS configuration
- This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups
- A Kubewarden Policy that echoes Kubernetes' AdmissionReview objects
- A Kubewarden Pod Security Policy that controls usage of AppArmor profiles
- Demo policy showing how to write a raw validating policy
- A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources
- A Kubewarden Policy that controls the usage of Pod runtimeClass
image-cve-policy
PublicPolicy that validates workloads based on the vulnerability of the images they make use ofcontext-aware-demo
PublicA demo policy showing how to access Kubernetes resources at policy evaluation timecapabilities-psp-policy
PublicA Pod Security Policy that controls Container Capabilities- Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces
- A Kubewarden policy that enforces root filesystem to be readonly
- Policy validates that there are no services with the same set of selectors
- Policy that validates and adjusts the usage of StorageClasses in PersistentVolumeClaims
- A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to
- Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers
- A Kubewarden Pod Security Policy that controls usage of Seccomp profiles
- A Kubewarden Policy that controls the usage of `volumeMounts`
sleeping-policy
PublicA test policy that simulates long running policy evaluationsselinux-psp-policy
PublicReplacement for the Kubernetes Pod Security Policy that controls the usage of SELinux- A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables
- Policy validates pods sharing processes PID namespace
- A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation
policy-evaluator
PublicCrate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.