konstraint
k-rail
konstraint | k-rail | |
---|---|---|
3 | 3 | |
373 | 448 | |
-0.8% | - | |
8.1 | 0.0 | |
6 days ago | over 1 year ago | |
Go | Go | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
konstraint
- Is OPA Gatekeeper the best solution for writing policies for k8s clusters?
- OPA Rego is ridiculously confusing - best way to learn it?
-
How would you write policies in .rego file and use them in OPA-Gatekeeper?
The konstraint tool is quite popular for this use case: https://github.com/plexsystems/konstraint
k-rail
- Is OPA Gatekeeper the best solution for writing policies for k8s clusters?
-
Writing a Kubernetes Admission Controller
k-rail
-
Checking Your --privileged Container
k-rail: https://github.com/cruise-automation/k-rail
What are some alternatives?
jspolicy - jsPolicy - Easier & Faster Kubernetes Policies using JavaScript or TypeScript
gatekeeper - 🐊 Gatekeeper - Policy Controller for Kubernetes
bridgekeeper - Kubernetes policy enforcement using python
Kyverno - Kubernetes Native Policy Management
docker-security-checker - Dockerfile Security Checker using OPA Rego policies with Conftest
datree - Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
policy-as-code-war - OPA Gatekeeper vs Kyverno
kubeclarity - KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
regal - Regal is a linter for Rego, with the goal of making your Rego magnificent!
sysbox - An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
library - The Open Policy Agent project standard library.
kubernetes - Production-Grade Container Scheduling and Management