mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-13 02:10:15 +00:00
26 KiB
26 KiB
Security Policy as Code
!!! info "Architectural Context" Detailed reference for Security Policy as Code in the context of Hardened Infrastructure.
Table of Contents
Platform
Reference
- (2026) ==dev.to: Using Kyverno To Enforce EKS Best Practices== 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A curated reference on dev.to: Using Kyverno To Enforce EKS Best Practices for modern cloud native architectures.
- (2026) ==kyverno.io: Implementing your best practices is simple with kyverno== 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A curated reference on kyverno.io: Implementing your best practices is simple with kyverno for modern cloud native architectures.
- (2026) amazon.com: Policy-based countermeasures for Kubernetes – Part 1 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on amazon.com: Policy-based countermeasures for Kubernetes – Part 1 for modern cloud native architectures.
- (2026) fugue.co: Securing a Kubernetes pod with Regula and Open Policy Agent 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on fugue.co: Securing a Kubernetes pod with Regula and Open Policy Agent for modern cloud native architectures.
- (2026) blog.styra.com: Open Policy Agent: The Top 5 Kubernetes Admission Control Policies 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on blog.styra.com: Open Policy Agent: The Top 5 Kubernetes Admission Control Policies for modern cloud native architectures.
- (2026) siegert-maximilian.medium.com: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on siegert-maximilian.medium.com: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent for modern cloud native architectures.
- (2026) thenewstack.io: Weaveworks Adds Policy as Code to Secure Kubernetes Apps (Magalix) 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on thenewstack.io: Weaveworks Adds Policy as Code to Secure Kubernetes Apps (Magalix) for modern cloud native architectures.
- (2026) banzaicloud.com: Istio and Kubernetes ft. OPA policies 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on banzaicloud.com: Istio and Kubernetes ft. OPA policies for modern cloud native architectures.
- (2026) medium: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on medium: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent for modern cloud native architectures.
- (2026) Fugue: Container and Kubernetes. Runtime infrastructure security 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on Fugue: Container and Kubernetes. Runtime infrastructure security for modern cloud native architectures.
- (2026) aws.amazon.com: Policy-based countermeasures for Kubernetes – Part 1 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on aws.amazon.com: Policy-based countermeasures for Kubernetes – Part 1 for modern cloud native architectures.
- (2026) venturebeat.com: How Nirmata plans to ‘conquer Kubernetes complexity’ with open source Kyverno 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on venturebeat.com: How Nirmata plans to ‘conquer Kubernetes complexity’ with open source Kyverno for modern cloud native architectures.
- (2026) neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno 🌟 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno 🌟 for modern cloud native architectures.
- (2026) nirmata.com: Kubernetes Supply Chain Policy Management with Cosign and Kyverno 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on nirmata.com: Kubernetes Supply Chain Policy Management with Cosign and Kyverno for modern cloud native architectures.
- (2026) movi.hashnode.dev: Simplify Kubernetes Cluster Management with Kyverno 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on movi.hashnode.dev: Simplify Kubernetes Cluster Management with Kyverno for modern cloud native architectures.
- (2026) arun-sisodiya.medium.com: Kyverno — A Kubernetes native policy manager (Policy as Code) 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on arun-sisodiya.medium.com: Kyverno — A Kubernetes native policy manager (Policy as Code) for modern cloud native architectures.
- (2026) dev.to: Using Kyverno Policies for Kubernetes Governance 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on dev.to: Using Kyverno Policies for Kubernetes Governance for modern cloud native architectures.
- (2026) medium.com/compass-true-north: Governing Multi-Tenant Kubernetes Clusters with Kyverno 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on medium.com/compass-true-north: Governing Multi-Tenant Kubernetes Clusters with Kyverno for modern cloud native architectures.
- (2026) medium.com/@haseebshaukat2: Kyverno — Policy Engine for Kubernetes | Muhammad Haseeb Shaukat 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on medium.com/@haseebshaukat2: Kyverno — Policy Engine for Kubernetes | Muhammad Haseeb Shaukat for modern cloud native architectures.
- (2026) medium.com/@glen.yu: Why I prefer Kyverno over Gatekeeper for native Kubernetes policy management 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on medium.com/@glen.yu: Why I prefer Kyverno over Gatekeeper for native Kubernetes policy management for modern cloud native architectures.
- (2026) appsecengineer.com: Kubernetes Policy Management with Kyverno 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on appsecengineer.com: Kubernetes Policy Management with Kyverno for modern cloud native architectures.
- (2026) MagTape ⭐ 152 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on MagTape for modern cloud native architectures.
- (2026) medium: Automate policies enforcement with Policy-as-Code 🌟 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on medium: Automate policies enforcement with Policy-as-Code 🌟 for modern cloud native architectures.
- (2026) blog.gitguardian.com: What is Policy-as-Code? An Introduction to Open Policy Agent 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.gitguardian.com: What is Policy-as-Code? An Introduction to Open Policy Agent for modern cloud native architectures.
- (2026) PolicyHub CLI, a CLI tool that makes Rego policies searchable 🌟 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on PolicyHub CLI, a CLI tool that makes Rego policies searchable 🌟 for modern cloud native architectures.
- (2026) blog.styra.com: Integrating Identity: OAUTH2 and OPENID CONNECT in Open Policy Agent 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: Integrating Identity: OAUTH2 and OPENID CONNECT in Open Policy Agent for modern cloud native architectures.
- (2026) blog.styra.com: Rego Unit Testing 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: Rego Unit Testing for modern cloud native architectures.
- (2026) github.com/instrumenta/policies: A set of shared policies for use with Conftest' and other Open Policy Agent tools ⭐ 66 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on github.com/instrumenta/policies: A set of shared policies for use with Conftest' and other Open Policy Agent tools for modern cloud native architectures.
- (2026) blog.styra.com: Dynamic Policy Composition for OPA 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: Dynamic Policy Composition for OPA for modern cloud native architectures.
- (2026) blog.styra.com: 5 OPA Deployment Performance Models for Microservices 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: 5 OPA Deployment Performance Models for Microservices for modern cloud native architectures.
- (2026) thenewstack.io: Getting Open Policy Agent Up and Running 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on thenewstack.io: Getting Open Policy Agent Up and Running for modern cloud native architectures.
- (2026) blog.styra.com: Policy-based infrastructure guardrails with Terraform and OPA 🌟 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: Policy-based infrastructure guardrails with Terraform and OPA 🌟 for modern cloud native architectures.
- (2026) medium: Automated Manifest File Validation Using Open Policy Agent and GitHub Actions | Ravindu Sandeepa Rathugama 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on medium: Automated Manifest File Validation Using Open Policy Agent and GitHub Actions | Ravindu Sandeepa Rathugama for modern cloud native architectures.
- (2026) dev.to: Load external data into OPA: The Good, The Bad, and The Ugly 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on dev.to: Load external data into OPA: The Good, The Bad, and The Ugly for modern cloud native architectures.
- (2026) inspektor.cloud: Evaluating open policy agent in rust using wasm 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on inspektor.cloud: Evaluating open policy agent in rust using wasm for modern cloud native architectures.
- (2026) medium.com/4th-coffee: What is Policy-as-Code? An Introduction to Open Policy Agent 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on medium.com/4th-coffee: What is Policy-as-Code? An Introduction to Open Policy Agent for modern cloud native architectures.
- (2026) k8s-security-policies ⭐ 177 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on k8s-security-policies for modern cloud native architectures.
- (2026) medium: Deploying Open Policy Agent (OPA) on a GKE cluster — Step by Step 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on medium: Deploying Open Policy Agent (OPA) on a GKE cluster — Step by Step for modern cloud native architectures.
- (2026) blog.styra.com: Using OPA with GitOps to speed Cloud-Native development 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.styra.com: Using OPA with GitOps to speed Cloud-Native development for modern cloud native architectures.
- (2026) medium.com/gitguardian: What is Policy-as-Code? An Introduction to Open Policy Agent 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on medium.com/gitguardian: What is Policy-as-Code? An Introduction to Open Policy Agent for modern cloud native architectures.
- (2026) compile OpenPolicyAgent policies into WebAssembly and run them on the edge ⭐ 348 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on compile OpenPolicyAgent policies into WebAssembly and run them on the edge for modern cloud native architectures.
- (2026) thenewstack.io: Yor Automates Tagging for Infrastructure as Code 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on thenewstack.io: Yor Automates Tagging for Infrastructure as Code for modern cloud native architectures.
- (2026) checkov.io 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on checkov.io for modern cloud native architectures.
- (2026) Selefra: Selefra is an open-source policy-as-code software that provides' analytics for multi-cloud and SaaS. ⭐ 545 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on Selefra: Selefra is an open-source policy-as-code software that provides' analytics for multi-cloud and SaaS. for modern cloud native architectures.
- (2026) kyverno.io: Mutating Resources 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Mutating Resources for modern cloud native architectures.
- (2026) neonmirrors.net: Exploring Kyverno: Part 3, Generation 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on neonmirrors.net: Exploring Kyverno: Part 3, Generation for modern cloud native architectures.
- (2026) kyverno.io: Check deprecated APIs 🌟 🌟🌟🌟 [LEGACY] — A curated reference on kyverno.io: Check deprecated APIs 🌟 for modern cloud native architectures.
- (2026) kyverno.io: Generating resources into existing namespaces 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Generating resources into existing namespaces for modern cloud native architectures.
- (2026) kyverno.io: Add Pod Proxies 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Add Pod Proxies for modern cloud native architectures.
- (2026) kyverno.io: Auto-Gen Rules for Pod Controllers 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Auto-Gen Rules for Pod Controllers for modern cloud native architectures.
- (2026) kyverno.io: Require PodDisruptionBudget 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Require PodDisruptionBudget for modern cloud native architectures.
- (2026) neonmirrors.net: Exploring Kyverno: Introduction 🌟 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on neonmirrors.net: Exploring Kyverno: Introduction 🌟 for modern cloud native architectures.
- (2026) nirmata.com: Introducing Kyverno 1.4.2: Trusted And More Efficient! 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on nirmata.com: Introducing Kyverno 1.4.2: Trusted And More Efficient! for modern cloud native architectures.
- (2026) Policy Reporter 🌟 ⭐ 371 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on Policy Reporter 🌟 for modern cloud native architectures.
- (2026) dev.to: Default Kyverno Policies for OpenEBS 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on dev.to: Default Kyverno Policies for OpenEBS for modern cloud native architectures.
- (2026) kyverno.io: Restrict Image Registries 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on kyverno.io: Restrict Image Registries for modern cloud native architectures.
- (2026) blog.sigstore.dev: How to verify container images with Kyverno using KMS, Cosign, and Workload Identity 🌟🌟🌟 [COMMUNITY-TOOL] — A curated reference on blog.sigstore.dev: How to verify container images with Kyverno using KMS, Cosign, and Workload Identity for modern cloud native architectures.
- (2026) Cloud Custodian ⭐ 6007 🌟🌟🌟 [ENTERPRISE-STABLE] — A curated reference on Cloud Custodian for modern cloud native architectures.
💡 Explore Related: Chef | IaC | Crossplane