Kubewarden logo
GitHub
 Admission Controller documentation  Documentation issues  Contribute
Community
 Slack  Bluesky  Mastodon

Admission Controller

    • Introduction
    • Quick start
    • Tutorials
      • Writing Kubewarden policies
        • Introduction to CEL
          • Reusing ValidatingAdmissionPolicies
          • Context-aware CEL policies
          • Sigstore host capabilities
        • Rust
          • Creating a policy
          • Defining policy settings
          • Writing validation logic
          • Creating a new mutation policy
          • Logging
          • Building and distributing policies
          • Raw policies
        • Writing policies in Go
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
          • Logging
          • Integrating with GitHub Actions
          • Distributing policy
          • Validation using JSON queries
          • Writing raw policies
        • Rego
          • Builtin support
          • Open Policy Agent
            • Introduction to Open Policy Agent
            • Creating a new policy
            • Build and run a OPA policy for Kubewarden
            • Distributing an OPA policy with Kubewarden
            • Writing raw policies
          • Gatekeeper
            • Gatekeeper support
            • Creating a new Gatekeeper Rego policy
            • Build and run a Gatekeeper policy
            • Distributing a Gatekeeper policy with Kubewarden
        • C#
        • TypeScript
          • Writing policies in TypeScript/JavaScript
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
        • Swift
        • Other languages
        • WASI
          • WASI
          • Writing raw policies
        • Policy metadata
      • Testing policies
        • Policy testing
        • Testing for policy authors
        • Testing for cluster operators
      • Verifying Kubewarden
      • Publish policies to Artifact Hub
    • Explanations
      • Mutating policies
      • Context aware policies
      • Policy Groups
      • Certificate rotation
      • Distributing policies
      • Comparisons
        • Kubewarden vs OPA Gatekeeper
      • What is the Audit Scanner?
        • Audit Scanner - Limitations
        • Audit Scanner - Policy Reports
      • Kubewarden architecture
    • Howtos
      • Common tasks
      • Install kwctl
      • Production deployments
      • Deployment at scale
      • Audit Scanner
      • Configuring policies
      • Emergency disable
      • Configuring Policy Servers
        • Using custom CAs
        • Configuring PolicyServers to use private registries
        • Production deployments
      • Policy groups
      • PSP migration
      • ValidatingAdmissionPolicy migration
      • Pod Security Admission
      • Custom certificate authorities
      • Raw policies
      • ArgoCD Installation
      • Security
        • Secure supply chain
        • Enable mTLS with K3s
      • Air gap
        • Requirements
        • Installation
        • Hauler installation
      • Telemetry quick starts
        • Open Telemetry quick start
        • Tracing quickstart
        • Metrics quickstart
        • Custom OpenTelemetry Collector
      • Rancher Fleet
      • Rancher UI extension
        • Quickstart
        • Monitoring
        • Tracing
      • Rancher Application Collection
        • Verify images
      • Workarounds
        • Certificate rotation, releases ≥ v1.16
      • Contribution guide
        • Contributing to documentation
        • Improving documentation
      • Migrating Gatekeeper Policies to Kubewarden
    • Reference
      • Custom Resource Definitions (CRD)
      • Dependency matrix
      • Artifacts
      • Upgrade path
      • Metrics reference
      • Monitor mode
      • Policy specification
        • Policy communication specification
        • Policy settings
        • Validating policies
        • Mutating policies
        • Context aware policies
        • Host capabilities
          • Host capabilities specification
          • Signature verifier policies
          • Container registry capabilities
          • Network capabilities
          • Cryptographic capabilities
          • Kubernetes capabilities
      • OCI registry support for Kubewarden
      • Security
        • Webhooks
      • Threat Model
      • Policy evaluation timeout protection
      • Verification configuration format
      • Reference for sources.yaml
      • kwctl CLI
      • Policy Server CLI
    • For who?
    • Use cases
    • Organization
    • Enterprise
    • Glossary
    • Security disclosure
Admission Controller 1.30
  • Admission Controller
    • 1.36-dev
    • 1.35
    • 1.34
    • 1.33
    • 1.32
    • 1.31
    • 1.30
    • 1.29
    • 1.28
  • SBOM Scanner
    • 0.9.0-dev
  • Admission Controller
  • Howtos
  • Contribution guide
1.36-dev 1.35 1.34 1.33 1.32 1.31 1.30 1.29 1.28
Edit this Page

Contribution guide

Kubewarden welcomes all contributors, whether new or experienced.

Please review the contributing guide here.

Certificate rotation, releases ≥ v1.16 Contributing to documentation