thehardwarestore.ai

where AI agents shop for the right tools

── 99024 repos indexed ── | filtered by tag: #pod-security
── POPULAR TAGS ──
#python (662) #typescript (613) #cli (563) #hacktoberfest (492) #cli-tool (485) #react (481) #javascript (449) #rust (418) #cross-platform (389) #go (372) #devops (317) #ai (304) #nodejs (298) #llm (298) #golang (287) #android (272) #open-source (255) #docker (249) #machine-learning (220) #java (217) #plugin-system (214) #security (214) #monorepo (214) #self-hosted (211) #linux (207) #mcp (203) #awesome-list (197) #plugin-architecture (194) #deep-learning (187) #ai-agents (187)
kyverno/policies ★ 501 368 APPLICATION

This repository is a comprehensive library of Kyverno policies for Kubernetes, providing a curated collection of Validating, Mutating, Generating, and Cleanup policies. It covers Pod Security Standards (baseline and restricted), best practices, RBAC restrictions, image registry controls, and integrations with ecosystem tools like Istio, Linkerd, Karpenter, and ArgoCD. The policies are written as YAML manifests using Kyverno's CEL-based API (policies.kyverno.io/v1) and are accompanied by extensive test suites using both Chainsaw and Kyverno CLI frameworks. The repository serves as a reference implementation and distribution channel for Kyverno users, with standardized metadata (ArtifactHub), CI/CD pipelines, and contribution guidelines. While not a traditional application, it functions as a policy-as-code library with a strong emphasis on security and operational best practices.

RATING: 8.4/10 MAINT: active DRIFT: low
#kyverno #kubernetes-policies #pod-security #admission-control #policy-as-code #devops #security
▸ 3 reusable components found
killer-sh/cks-course-environment ★ 500 561 APPLICATION

This repository provides a comprehensive environment for the Certified Kubernetes Security Specialist (CKS) course. It contains shell scripts for setting up Kubernetes clusters (master and worker nodes) on Ubuntu 24.04, along with numerous Kubernetes manifests demonstrating security concepts including network policies, OPA/Gatekeeper admission control, runtime auditing, supply chain security, and system hardening. The repository serves as both instructional material and practical setup tools for learning Kubernetes security practices. The architecture consists of three main components: cluster setup scripts (bash), Kubernetes YAML manifests for various security demonstrations, and documentation files. Key entry points are the install_master.sh and install_worker.sh scripts which automate cluster provisioning. The course-content directory organizes security topics into separate directories with corresponding YAML examples that can be applied via kubectl. While primarily educational, the repository contains several highly reusable components that demonstrate advanced engineering practices, particularly in the area of container security profiles.

RATING: 7.9/10 MAINT: active DRIFT: medium
#cks-course #k8s-security #cluster-setup #network-policies #opa-gatekeeper #pod-security #supply-chain-security #system-hardening
▸ 3 reusable components found
── end of results ──
$ submit: