Repositories list

• deprecated-api-versions-policy

  Public
  A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •4•15•1•0•Updated Jan 10, 2025Jan 10, 2025

• policy-server

  Public
  Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

  rustwebassemblypolicy+ 5hacktoberfestpolicy-as-codekubernetes-webhookkubernetes-securitykubernetes

  Rust

  •

  Apache License 2.0

  •18•142•17•1•Updated Jan 10, 2025Jan 10, 2025

• kubewarden-controller

  Public
  Manage admission policies in your Kubernetes cluster with ease

  webassemblyhacktoberfestpolicy-as-code+ 2kubernetes-securitykubernetes

  Go

  •

  Apache License 2.0

  •33•197•72•1•Updated Jan 10, 2025Jan 10, 2025

• k8s-objects-generator

  Public
  CLI tool that generates Kubernetes Go types that can be used with TinyGo starting from the official OpenAPI spec

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  Go

  •

  Apache License 2.0

  •5•8•1•0•Updated Jan 10, 2025Jan 10, 2025

• raw-mutation-wasi-policy

  Public
  Demo policy showing how to write a raw WASI mutation policy

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Go

  •

  Apache License 2.0

  •1•0•1•0•Updated Jan 10, 2025Jan 10, 2025

• go-wasi-context-aware-test-policy

  Public
  A test context-aware policy written using Go Wasi

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Go

  •

  Apache License 2.0

  •2•1•1•0•Updated Jan 10, 2025Jan 10, 2025

• raw-validation-wasi-policy

  Public
  Demo policy showing how to write a raw WASI validating policy

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Go

  •

  Apache License 2.0

  •1•0•1•0•Updated Jan 10, 2025Jan 10, 2025

• policy-sdk-dotnet

  Public
  Kubewarden Policy SDK for the .NET platform

  kubernetescsharpdotnet+ 5webassemblyhacktoberfestpolicy-as-codekubernetes-securitykubewarden-policy-sdk

  C#

  •

  Apache License 2.0

  •1•8•2•2•Updated Jan 10, 2025Jan 10, 2025

• kwctl

  Public
  Go-to CLI tool for Kubewarden users

  webassemblyhacktoberfestpolicy-as-code+ 2kubernetes-securitykubernetes

  Rust

  •

  Apache License 2.0

  •16•76•20•0•Updated Jan 10, 2025Jan 10, 2025

• pod-privileged-policy

  Public
  A Kubewarden Policy that limits the ability to create privileged containers

  webassemblyhacktoberfestpolicy-as-code+ 4pod-security-policykubernetes-securitykubewarden-policykubernetes

  Rust

  •

  Apache License 2.0

  •6•8•2•0•Updated Jan 9, 2025Jan 9, 2025

• audit-scanner

  Public
  Reports evaluation of existing Kubernetes resources with your already deployed Kubewarden policies.

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  Go

  •

  Apache License 2.0

  •8•8•9•0•Updated Jan 9, 2025Jan 9, 2025

• kyverno-dsl-policy

  Public
  [Experimental] Reuse Kyverno policies with Kubewarden

  kuberneteswebassemblypolicy-as-code+ 4kubernetes-securitykyvernokubewarden-policykyverno-policies

  Go

  •

  Apache License 2.0

  •1•1•3•1•Updated Jan 9, 2025Jan 9, 2025

• rego-policies-library

  Public
  A collection of Rego policies that can be used to enforce best practices in Kubernetes clusters

  kuberneteswebassemblycompliance+ 6gatekeeperhacktoberfestpolicy-as-coderegokubernetes-securitykubewarden-policy

  Open Policy Agent

  •

  Apache License 2.0

  •2•0•1•1•Updated Jan 9, 2025Jan 9, 2025

• github-actions

  Public
  GitHub actions used by the Kubewarden project

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  Apache License 2.0

  •7•4•4•0•Updated Jan 9, 2025Jan 9, 2025

• context-aware-test-opa-policy

  Public
  Open Policy Agent

  •

  Apache License 2.0

  •0•0•1•1•Updated Jan 9, 2025Jan 9, 2025

• swift-policy-template

  Public template
  A template repository to quickly scaffold a Kubewarden policy written with Swift language

  swiftkuberneteswebassembly+ 4hacktoberfestpolicy-as-codekubernetes-securitykubewarden-policy-template

  Swift

  •

  Apache License 2.0

  •1•1•3•1•Updated Jan 9, 2025Jan 9, 2025

• context-aware-test-gatekeeper-policy

  Public
  Open Policy Agent

  •

  Apache License 2.0

  •0•0•1•1•Updated Jan 9, 2025Jan 9, 2025

• container-resources-policy

  Public
  Policy is designed to enforce constraints on the resource requirements of Kubernetes containers

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Go

  •

  Apache License 2.0

  •5•0•1•1•Updated Jan 8, 2025Jan 8, 2025

• policy-evaluator

  Public
  Crate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.

  hacktoberfest

  Rust

  •

  Apache License 2.0

  •8•15•22•0•Updated Jan 8, 2025Jan 8, 2025

• kubecon-24-eu-kubewarden

  Public
  Experiment for Kubewarden booth at Kubecon EU 2024

  JavaScript

  •

  Apache License 2.0

  •2•2•1•22•Updated Jan 8, 2025Jan 8, 2025

• rancher-kubectl-builder

  Public
  Workflow to rebuild and sign rancher/kubectl image

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  Shell

  •2•1•1•2•Updated Jan 8, 2025Jan 8, 2025

• docs

  Public
  Kubewarden's documentation

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  MDX

  •

  Creative Commons Attribution 4.0 International

  •23•13•16•2•Updated Jan 8, 2025Jan 8, 2025

• kubewarden.io

  Public
  Kubewarden website

  kuberneteswebassemblyhacktoberfest+ 2policy-as-codekubernetes-security

  SCSS

  •15•11•8•0•Updated Jan 8, 2025Jan 8, 2025

• unique-service-selector-policy

  Public
  Policy validates that there are no services with the same set of selectors

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •1•0•1•0•Updated Jan 7, 2025Jan 7, 2025

• apparmor-psp-policy

  Public
  A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

  webassemblyhacktoberfestpolicy-as-code+ 4pod-security-policykubernetes-securitykubewarden-policykubernetes

  Rust

  •

  Apache License 2.0

  •4•6•3•0•Updated Jan 7, 2025Jan 7, 2025

• pod-ndots-policy

  Public
  Policy that enforces the usage of ndots in the pod's DNS configuration

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •0•0•1•0•Updated Jan 7, 2025Jan 7, 2025

• allowed-fsgroups-psp-policy

  Public
  Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

  kuberneteswebassemblyhacktoberfest+ 4policy-as-codepod-security-policykubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •5•4•3•0•Updated Jan 7, 2025Jan 7, 2025

• verify-image-signatures

  Public
  A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

  kuberneteswebassemblyhacktoberfest+ 4policy-as-codepod-security-policykubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •9•13•2•0•Updated Jan 7, 2025Jan 7, 2025

• env-variable-secrets-scanner-policy

  Public
  A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables

  kuberneteswebassemblyhacktoberfest+ 3policy-as-codekubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •3•5•1•0•Updated Jan 7, 2025Jan 7, 2025

• readonly-root-filesystem-psp-policy

  Public
  A Kubewarden policy that enforces root filesystem to be readonly

  kuberneteswebassemblyhacktoberfest+ 4policy-as-codepod-security-policykubernetes-securitykubewarden-policy

  Rust

  •

  Apache License 2.0

  •3•2•3•0•Updated Jan 7, 2025Jan 7, 2025