awesome-kubernetes/v2-docs/securityascode.md

Securityascode

!!! info "Architectural Context" Detailed reference for Securityascode in the context of Hardened Infrastructure.

• searchitoperations.techtarget.com: Kubernetes policy project takes enterprise IT by storm [COMMUNITY-TOOL]
• amazon.com: Policy-based countermeasures for Kubernetes – Part 1 [COMMUNITY-TOOL]
• blog.gitguardian.com: What is Policy-as-Code? An Introduction to Open Policy Agent [COMMUNITY-TOOL]
• OPA Open Policy Agent 🌟 [COMMUNITY-TOOL]
• fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA) [COMMUNITY-TOOL]
• PolicyHub CLI, a CLI tool that makes Rego policies searchable 🌟 [COMMUNITY-TOOL]
• github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools [COMMUNITY-TOOL]
• thenewstack.io: Getting Open Policy Agent Up and Running [COMMUNITY-TOOL]
• thenewstack.io: Weaveworks Adds Policy as Code to Secure Kubernetes Apps (Magalix) [COMMUNITY-TOOL]
• dev.to: Load external data into OPA: The Good, The Bad, and The Ugly [COMMUNITY-TOOL]
• kubermatic.com: Using Open Policy Agent With Kubermatic Kubernetes Platform [COMMUNITY-TOOL]
• k8s-security-policies [COMMUNITY-TOOL]
• blog.openshift.com: Fine-Grained Policy Enforcement in OpenShift with Open Policy Agent 🌟 [COMMUNITY-TOOL]
• compile OpenPolicyAgent policies into WebAssembly and run them on the edge [COMMUNITY-TOOL]
• Fugue: Container and Kubernetes. Runtime infrastructure security [COMMUNITY-TOOL]
• thenewstack.io: Yor Automates Tagging for Infrastructure as Code [COMMUNITY-TOOL]
• yor.io [COMMUNITY-TOOL]
• checkov.io [COMMUNITY-TOOL]
• aws.amazon.com: Policy-based countermeasures for Kubernetes – Part 1 [COMMUNITY-TOOL]
• Selefra: Selefra is an open-source policy-as-code software that provides analytics for multi-cloud and SaaS. [COMMUNITY-TOOL]
• neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno 🌟 [COMMUNITY-TOOL]
• dev.to: Using Kyverno To Enforce EKS Best Practices [COMMUNITY-TOOL]
• kyverno.io: Mutating Resources [COMMUNITY-TOOL]
• squadcast.com: Kyverno - Policy Management in Kubernetes 🌟 [COMMUNITY-TOOL]
• neonmirrors.net: Exploring Kyverno: Part 3, Generation [COMMUNITY-TOOL]
• kyverno.io: Check deprecated APIs 🌟 [COMMUNITY-TOOL]
• kyverno.io: Generating resources into existing namespaces [COMMUNITY-TOOL]
• kyverno.io: Add Pod Proxies [COMMUNITY-TOOL]
• kyverno.io: Auto-Gen Rules for Pod Controllers [COMMUNITY-TOOL]
• kyverno.io: Require PodDisruptionBudget [COMMUNITY-TOOL]
• nirmata.com: Kubernetes Supply Chain Policy Management with Cosign and Kyverno [COMMUNITY-TOOL]
• neonmirrors.net: Exploring Kyverno: Introduction 🌟 [COMMUNITY-TOOL]
• nirmata.com: Introducing Kyverno 1.4.2: Trusted And More Efficient! [COMMUNITY-TOOL]
• searchitoperations.techtarget.com: CNCF policy-as-code project bridges Kubernetes security gaps [COMMUNITY-TOOL]
• Policy Reporter 🌟 [COMMUNITY-TOOL]
• sesin.at: Securing Kubernetes with Kyverno: How to Protect Your Users From Themselves by Ritesh Patel [COMMUNITY-TOOL]
• dev.to: Default Kyverno Policies for OpenEBS [COMMUNITY-TOOL]
• cloud.redhat.com: Automate Your Security Practices and Policies on OpenShift With Kyverno 🌟 [COMMUNITY-TOOL]
• A Kyverno policy to block custom snippet configurations for Kubernetes Nginx ingress (CVE-2021-25742 [COMMUNITY-TOOL]
• kyverno.io: Restrict Image Registries [COMMUNITY-TOOL]
• dev.to: Using Kyverno Policies for Kubernetes Governance [COMMUNITY-TOOL]
• kyverno.io: Implementing your best practices is simple with kyverno [COMMUNITY-TOOL]
• youtube: The Rise of Kubernetes Policy Engine | Ep 57 [COMMUNITY-TOOL]
• blog.sigstore.dev: How to verify container images with Kyverno using KMS, Cosign, and Workload Identity [COMMUNITY-TOOL]
• appsecengineer.com: Kubernetes Policy Management with Kyverno [COMMUNITY-TOOL]
• Cloud Custodian [COMMUNITY-TOOL]
• Apolicy [COMMUNITY-TOOL]
• sysdig.com: Sysdig and Apolicy join forces to help customers secure Infrastructure As Code and automate remediation [COMMUNITY-TOOL]