google / k8s-digester
Add digests to container and init container images in Kubernetes pod and pod template specs. Use either as a mutating admission webhook, or as a client-side KRM function with kpt or kustomize.
☆122Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for k8s-digester
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆76Updated 7 months ago
- An admission controller service and kubectl plugin to handle container drift in K8s clusters☆125Updated 2 years ago
- Alertmanager to Kubernetes Node conditions bridge☆166Updated last month
- A Kubernetes CSI plugin to automatically mount SPIFFE certificates to Pods using ephemeral volumes☆76Updated this week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆123Updated this week
- Plugin for Helm to integrate the sigstore ecosystem☆60Updated 2 weeks ago
- approver-policy is a cert-manager approver that allows users to define policies that restrict what certificates can be requested.☆67Updated this week
- kubectl plugin for signing Kubernetes manifest YAML files with sigstore☆79Updated last week
- A Helm chart templating CLI, kustomize plugin and containerized kustomize/kpt KRM function☆120Updated 3 months ago
- ☆90Updated this week
- Config Sync - used to sync Git, OCI and Helm charts to your clusters.☆243Updated this week
- Octant plugin for viewing Starboard security information☆57Updated 2 years ago
- The Helm Charts OCI Proxy, will proxy and transform Helm Chart into OCI images on the fly. Address any Helm Chart as OCI image.☆97Updated 2 months ago
- ☆54Updated this week
- cert-manager issuer for Google CA Service☆79Updated this week
- This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls…☆48Updated last week
- A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes☆203Updated this week
- Logs updates to Kubernetes Objects for storing and querying with Loki☆125Updated 5 months ago
- K8s-shredder - an opinionated way of parking in Kubernetes☆74Updated this week
- [alpha] Controller to override image sources in the event that an image cannot be pulled.☆115Updated 2 weeks ago
- GitOps Toolkit controller that scans container registries☆110Updated this week
- A fluxcd controller for managing manifests declared in jsonnet☆66Updated last year
- Kubernetes Operator to sync secrets between different secret backends and Kubernetes☆156Updated last week
- Home for Cluster API Operator, a subproject of sig-cluster-lifecycle☆174Updated last week
- Rego policies collection☆158Updated this week
- A kubectl plugin which triggers a Sysdig capture☆99Updated last year
- Enterprise Distribution for Flux CD☆61Updated this week
- Terraform Provider for kind (Kubernetes IN Docker)☆80Updated 2 years ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆56Updated this week
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆63Updated this week