Skip to content

Kubewarden is a policy engine for Kubernetes. It helps with keeping your Kubernetes clusters secure 🔐 and compliant ✔.

Kubewarden policies can be written using regular programming languages or Domain Specific Languages (DSL).

Policies are compiled into WebAssembly modules that are then distributed using traditional container registries.

Getting Started 📚

Check our first-stop kubewarden/community 👋 repository for information about the organization of the project.

Take a look at our documentation 📖 Stay up to date by reading our official blog 📣 and by following us on Twitter.

Get in touch with us on Slack: join the kubewarden channel hosted by the official Kubernetes workspace 👨‍💻 💬 👩‍💻

Enforcing Policies 🔒

Discover ready to use policies by visiting ArtifactHub 📦

Don't forget to take a look at kwctl, our handy multi-purpose tool for managing policies 🛠️ 🧰

Writing policies 📝

Interested in writing a new policy?

Kubewarden allows you to write policies using a variety of programming languages, including Rust, Go, Rego, CEL and others.

These are some useful resources to get you started:

Useful GitHub tags :octocat: 🏷️

Use these tags to find repositories over all GitHub 🗺️ 🌌

Purpose Tag
Policy Template kubewarden-policy-template
Policy kubewarden-policy
Policy SDK kubewarden-policy-sdk

Contributing 🙌

That's fantastic news! 🥳

Check our general CONTRIBUTING.md docs.

Quick links to "core" projects:

Project Scope Language
kubewarden-controller Kubernetes integration point Go
policy-server Run Kubewarden policies Rust
kwctl Kubewarden policy multi-purpose cli tool Rust

Pinned Loading

  1. kwctl kwctl Public

    Go-to CLI tool for Kubewarden users

    Rust 75 16

  2. policy-server policy-server Public

    Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

    Rust 142 18

  3. kubewarden-controller kubewarden-controller Public

    Manage admission policies in your Kubernetes cluster with ease

    Go 196 33

  4. rust-policy-template rust-policy-template Public

    A Kubewarden rust policy template to be used with cargo-generate

    Rust 9 6

  5. go-policy-template go-policy-template Public template

    A template repository to quickly scaffold a Kubewarden policy written with Go language

    Go 10 16

  6. swift-policy-template swift-policy-template Public template

    A template repository to quickly scaffold a Kubewarden policy written with Swift language

    Swift 1 1

Repositories

Showing 10 of 96 repositories
  • allow-privilege-escalation-psp-policy Public

    A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

    kubewarden/allow-privilege-escalation-psp-policy’s past year of commit activity
    Rust 6 Apache-2.0 7 2 1 Updated Dec 28, 2024
  • allowed-fsgroups-psp-policy Public

    Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

    kubewarden/allowed-fsgroups-psp-policy’s past year of commit activity
    Rust 4 Apache-2.0 5 3 (1 issue needs help) 1 Updated Dec 27, 2024
  • selinux-psp-policy Public

    Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux

    kubewarden/selinux-psp-policy’s past year of commit activity
    Rust 1 Apache-2.0 3 3 (2 issues need help) 1 Updated Dec 27, 2024
  • flexvolume-drivers-psp-policy Public

    Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers

    kubewarden/flexvolume-drivers-psp-policy’s past year of commit activity
    Rust 1 Apache-2.0 3 3 (2 issues need help) 1 Updated Dec 27, 2024
  • apparmor-psp-policy Public

    A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

    kubewarden/apparmor-psp-policy’s past year of commit activity
    Rust 6 Apache-2.0 4 3 (2 issues need help) 1 Updated Dec 27, 2024
  • trusted-repos-policy Public

    A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to

    kubewarden/trusted-repos-policy’s past year of commit activity
    Rust 6 Apache-2.0 3 2 (1 issue needs help) 1 Updated Dec 27, 2024
  • seccomp-psp-policy Public

    A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

    kubewarden/seccomp-psp-policy’s past year of commit activity
    Rust 4 Apache-2.0 4 3 (2 issues need help) 1 Updated Dec 27, 2024
  • pod-privileged-policy Public

    A Kubewarden Policy that limits the ability to create privileged containers

    kubewarden/pod-privileged-policy’s past year of commit activity
    Rust 8 Apache-2.0 6 2 6 Updated Dec 27, 2024
  • unique-service-selector-policy Public

    Policy validates that there are no services with the same set of selectors

    kubewarden/unique-service-selector-policy’s past year of commit activity
    Rust 0 Apache-2.0 1 1 1 Updated Dec 27, 2024
  • deprecated-api-versions-policy Public

    A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

    kubewarden/deprecated-api-versions-policy’s past year of commit activity
    Rust 15 Apache-2.0 4 1 2 Updated Dec 27, 2024

Top languages

Loading…

Most used topics

Loading…