Kubewarden logo
GitHub
 Admission Controller documentation  Documentation issues  Contribute
Community
 Slack  Bluesky  Mastodon

Admission Controller

    • Introduction
    • Quick start
    • Tutorials
      • Writing Kubewarden Admission Controller policies
        • Introduction to CEL
          • Reusing ValidatingAdmissionPolicies
          • Context-aware CEL policies
          • Sigstore host capabilities
        • Rust
          • Creating a policy
          • Defining policy settings
          • Writing validation logic
          • Creating a new mutation policy
          • Logging
          • Building and distributing policies
          • Raw policies
        • Writing policies in Go
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
          • Logging
          • Integrating with GitHub Actions
          • Distributing policy
          • Validation using JSON queries
          • Writing raw policies
        • Rego
          • Builtin support
          • Open Policy Agent
            • Introduction to Open Policy Agent
            • Creating a new policy
            • Build and run a OPA policy for Admission Controller
            • Distributing an OPA policy with Kubewarden Admission Controller
            • Writing raw policies
          • Gatekeeper
            • Gatekeeper support
            • Creating a new Gatekeeper Rego policy
            • Build and run a Gatekeeper policy
            • Distributing a Gatekeeper policy with Kubewarden Admission Controller
        • C#
        • TypeScript
          • Writing policies in TypeScript/JavaScript
          • Creating a new validation policy
          • Defining policy settings
          • Writing the validation logic
          • End-to-end testing
        • Swift
        • Other languages
        • WASI
          • WASI
          • Writing raw policies
        • Policy metadata
      • Testing policies
        • Policy testing
        • Testing for policy authors
        • Testing for cluster operators
      • Verifying Kubewarden Admission Controller
      • Publish policies to Artifact Hub
    • Explanations
      • Policy lifecycle
      • Mutating policies
      • Context aware policies
      • Policy Groups
      • Certificate rotation
      • Distributing policies
      • Comparisons
        • Kubewarden Admission Controller vs OPA Gatekeeper
        • Kubewarden Admission Controller vs Kyverno
      • What is the Audit Scanner?
        • Audit Scanner - Limitations
        • Audit Scanner - Policy Reports
      • Admission Controller architecture
    • Howtos
      • Common tasks
      • Install kwctl
      • Production deployments
      • Deployment at scale
      • Audit Scanner
      • Configuring policies
      • Allowing evaluations in the Admission Controller namespace
      • Emergency disable
      • Configuring Policy Servers
        • Using custom CAs
        • Configuring PolicyServers to use private registries
        • Production deployments
        • Using proxies
        • Configuring PolicyServers for private Sigstore instances
        • Controlling host capabilities for namespaced policies
        • Host capabilities call reference
      • Policy groups
      • PSP migration
      • ValidatingAdmissionPolicy migration
      • Pod Security Admission
      • Custom certificate authorities
      • Proxy configuration
      • Raw policies
      • Host network mode
      • ArgoCD Installation
      • Security
        • Secure supply chain
        • Enable mTLS with K3s
      • Air gap
        • Requirements
        • Installation
        • Hauler installation
      • Telemetry quick starts
        • Open Telemetry quick start
        • Tracing quickstart
        • Metrics quickstart
        • Custom OpenTelemetry Collector
      • Rancher Fleet
      • Rancher UI extension
        • Quickstart
        • Monitoring
        • Tracing
      • Rancher Application Collection
        • Verify images
      • Rancher Backup Operator
      • KubeStellar Console guided installation
      • Workarounds
        • Certificate rotation, releases ≥ v1.16
      • Contribution guide
        • Contributing to documentation
        • Improving documentation
      • Migrating Gatekeeper Policies to Kubewarden Admission Controller
    • Reference
      • Custom Resource Definitions (CRD)
      • Dependency matrix
      • Artifacts
      • Upgrade path
      • Metrics reference
      • Monitor mode
      • Policy specification
        • Policy communication specification
        • Policy settings
        • Validating policies
        • Mutating policies
        • Context aware policies
        • Host capabilities
          • Host capabilities specification
          • Signature verifier policies
          • Container registry capabilities
          • Network capabilities
          • Cryptographic capabilities
          • Kubernetes capabilities
          • Host capabilities call reference
      • OCI registry support for Admission Controller
      • Security
        • Webhooks
      • Threat Model
      • Policy evaluation timeout protection
      • Verification configuration format
      • Reference for sources.yaml
      • kwctl CLI
      • Policy Server CLI
    • For who?
    • Use cases
    • Organization
    • Enterprise
    • Glossary
    • Security disclosure
Admission Controller 1.36
  • Admission Controller
    • 1.37-dev
    • 1.36
    • 1.35
    • 1.34
    • 1.33
    • 1.32
    • 1.31
    • 1.30
    • 1.29
    • 1.28
  • SBOM Scanner
    • 0.9.0-dev
  • Admission Controller
  • Howtos
  • Contribution guide
1.37-dev 1.36 1.35 1.34 1.33 1.32 1.31 1.30 1.29 1.28
Edit this Page

Contribution guide

Kubewarden Admission Controller welcomes all contributors, whether new or experienced.

Please review the contributing guide here.

Certificate rotation, releases ≥ v1.16 Contributing to documentation