kyverno / policies

Kyverno policies for security and best practices
Apache License 2.0
327 stars 235 forks source link

Convert `Kubernetes Best Practices` policies to CEL #891

Open JimBugwadia opened 8 months ago

JimBugwadia commented 8 months ago

Problem Statement

Kubernetes Best Practices policies are written using Kyverno patterns and JMESPath, which means they cannot be executed as ValidatingAdmissionPolicy resources in the API server.

Solution Description

Convert Kubernetes Best Practices policies, and other validating policies, to CEL wherever possible.

Example "Good" Resource

No response

Example "Bad" Resource

No response

Other Comments

No response

Slack discussion

No response

Troubleshooting

anusha94 commented 8 months ago

/assign @anusha94

swastik959 commented 8 months ago

Seems interesting will to applying to it .

chipzoller commented 5 months ago

@MariamFahmy98, you've got a lot of PRs to review here 😄

Chandan-DK commented 5 months ago

There's more on the way :)