Kubewarden is a policy engine for Kubernetes. It helps with keeping your Kubernetes clusters secure 🔐 and compliant ✔.
Kubewarden policies can be written using regular programming languages or Domain Specific Languages (DSL).
Policies are compiled into WebAssembly modules that are then distributed using traditional container registries.
Getting Started 📚
Check our first-stop kubewarden/community 👋 repository for information about the organization of the project.
Take a look at our documentation 📖 Stay up to date by reading our official blog 📣 and by following us on Bluesky or Mastodon.
Get in touch with us on Slack: join the kubewarden channel hosted by the official Kubernetes workspace 👨💻 💬 👩💻
Enforcing Policies 🔒
Discover ready to use policies by visiting ArtifactHub 📦
Don't forget to take a look at kwctl, our handy multi-purpose tool for managing policies 🛠️ 🧰
Writing policies 📝
Interested in writing a new policy?
Kubewarden allows you to write policies using a variety of programming languages, including Rust, Go, Rego, CEL and others.
These are some useful resources to get you started:
- Step-by-step tutorials inside of our documentation 📖
- Policy SDK: overview of the Policy SDKs available, and their maturity level 📚
- Policy templates: boilerplate code to help you get started 🚀
🏷️Use these tags to find repositories over all GitHub 🗺️ 🌌
| Purpose | Tag |
|---|---|
| Policy Template | kubewarden-policy-template |
| Policy | kubewarden-policy |
| Policy SDK | kubewarden-policy-sdk |
Contributing 🙌
That's fantastic news! 🥳
Check our general CONTRIBUTING.md docs.
Quick links to "core" projects:
| Project | Scope | Language |
|---|---|---|
kubewarden-controller |
Kubernetes integration point | Go |
policy-server |
Run Kubewarden policies | Rust |
kwctl |
Kubewarden policy multi-purpose cli tool | Rust |