A Chimera Policy written in Rust that ensures only trusted users can create workloads tolerating a chosen taint
-
Updated
Feb 8, 2021 - Rust
A Chimera Policy written in Rust that ensures only trusted users can create workloads tolerating a chosen taint
A Kubernetes dynamic admission controller that uses WebAssembly policies to validate incoming requests
A Kubewarden policy to check liveness and readiness probes
Zed extension for the Rego policy language from Open Policy Agent (OPA)
Policy validates pods sharing processes PID namespace
A Kubewarden policy to disallow usage of the default namespace
Policy validates that there are no services with the same set of selectors
Demo policy showing how to write a raw validating policy
A demo policy showing how to access Kubernetes resources at policy evaluation time
A test policy that simulates long running policy evaluations
A Kubewarden Policy that controls the usage of environment variables
Policy that validates and adjusts the usage of StorageClasses in PersistentVolumeClaims
A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables
A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to
Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux
Kubewarden policy that ensures that namespaces have the required PSA labels
Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers
A Kubewarden Policy that echoes Kubernetes' AdmissionReview objects
A Kubewarden policy that enforces root filesystem to be readonly
A Kubewarden Policy that controls the usage of `volumeMounts`
Add a description, image, and links to the policy-as-code topic page so that developers can more easily learn about it.
To associate your repository with the policy-as-code topic, visit your repo's landing page and select "manage topics."