Kubewarden logo
GitHub
 Admission Controller documentation  Documentation issues  Contribute
Community
 Slack  Bluesky  Mastodon

Admission Controller

    • Introduction
    • Quick start
    • Tutorials
      • Writing Kubewarden Admission Controller policies
        • Introduction to CEL
          • Reusing ValidatingAdmissionPolicies
          • Context-aware CEL policies
          • Sigstore host capabilities
        • Rust
          • Creating a policy
          • Defining policy settings
          • Writing validation logic
          • Creating a new mutation policy
          • Logging
          • Building and distributing policies
          • Raw policies
        • Writing policies in Go
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
          • Logging
          • Integrating with GitHub Actions
          • Distributing policy
          • Validation using JSON queries
          • Writing raw policies
        • Rego
          • Builtin support
          • Open Policy Agent
            • Introduction to Open Policy Agent
            • Creating a new policy
            • Build and run a OPA policy for Admission Controller
            • Distributing an OPA policy with Kubewarden Admission Controller
            • Writing raw policies
          • Gatekeeper
            • Gatekeeper support
            • Creating a new Gatekeeper Rego policy
            • Build and run a Gatekeeper policy
            • Distributing a Gatekeeper policy with Kubewarden Admission Controller
        • C#
        • TypeScript
          • Writing policies in TypeScript/JavaScript
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
        • Swift
        • Other languages
        • WASI
          • WASI
          • Writing raw policies
        • Policy metadata
      • Testing policies
        • Policy testing
        • Testing for policy authors
        • Testing for cluster operators
      • Verifying Kubewarden Admission Controller
      • Publish policies to Artifact Hub
    • Explanations
      • Policy lifecycle
      • Mutating policies
      • Context aware policies
      • Policy Groups
      • Certificate rotation
      • Distributing policies
      • Comparisons
        • Kubewarden Admission Controller vs OPA Gatekeeper
      • What is the Audit Scanner?
        • Audit Scanner - Limitations
        • Audit Scanner - Policy Reports
      • Admission Controller architecture
    • Howtos
      • Common tasks
      • Install kwctl
      • Production deployments
      • Deployment at scale
      • Audit Scanner
      • Configuring policies
      • Allowing evaluations in the Admission Controller namespace
      • Emergency disable
      • Configuring Policy Servers
        • Using custom CAs
        • Configuring PolicyServers to use private registries
        • Production deployments
        • Using proxies
        • Configuring PolicyServers for private Sigstore instances
        • Controlling host capabilities for namespaced policies
        • Host capabilities call reference
      • Policy groups
      • PSP migration
      • ValidatingAdmissionPolicy migration
      • Pod Security Admission
      • Custom certificate authorities
      • Proxy configuration
      • Raw policies
      • Host network mode
      • ArgoCD Installation
      • Security
        • Secure supply chain
        • Enable mTLS with K3s
      • Air gap
        • Requirements
        • Installation
        • Hauler installation
      • Telemetry quick starts
        • Open Telemetry quick start
        • Tracing quickstart
        • Metrics quickstart
        • Custom OpenTelemetry Collector
      • Rancher Fleet
      • Rancher UI extension
        • Quickstart
        • Monitoring
        • Tracing
      • Rancher Application Collection
        • Verify images
      • Rancher Backup Operator
      • KubeStellar Console guided installation
      • Workarounds
        • Certificate rotation, releases ≥ v1.16
      • Contribution guide
        • Contributing to documentation
        • Improving documentation
      • Migrating Gatekeeper Policies to Kubewarden Admission Controller
    • Reference
      • Custom Resource Definitions (CRD)
      • Dependency matrix
      • Artifacts
      • Upgrade path
      • Metrics reference
      • Monitor mode
      • Policy specification
        • Policy communication specification
        • Policy settings
        • Validating policies
        • Mutating policies
        • Context aware policies
        • Host capabilities
          • Host capabilities specification
          • Signature verifier policies
          • Container registry capabilities
          • Network capabilities
          • Cryptographic capabilities
          • Kubernetes capabilities
          • Host capabilities call reference
      • OCI registry support for Admission Controller
      • Security
        • Webhooks
      • Threat Model
      • Policy evaluation timeout protection
      • Verification configuration format
      • Reference for sources.yaml
      • kwctl CLI
      • Policy Server CLI
    • For who?
    • Use cases
    • Organization
    • Enterprise
    • Glossary
    • Security disclosure
Admission Controller 1.36-dev
  • Admission Controller
    • 1.36-dev
    • 1.35
    • 1.34
    • 1.33
    • 1.32
    • 1.31
    • 1.30
    • 1.29
    • 1.28
  • SBOM Scanner
    • 0.9.0-dev
  • Admission Controller
  • Howtos
  • Contribution guide
1.36-dev 1.35 1.34 1.33 1.32 1.31 1.30 1.29 1.28
Edit this Page

This is unreleased documentation for Admission Controller 1.36-dev.

Contribution guide

Kubewarden Admission Controller welcomes all contributors, whether new or experienced.

Please review the contributing guide here.

Certificate rotation, releases ≥ v1.16 Contributing to documentation