open-policy-agent / opa-envoy-spire-ext-authz

Related projects ⓘ

Alternatives and complementary repositories for opa-envoy-spire-ext-authz

• alcideio / kaudit
  Alcide Kubernetes Audit Log Analyzer - Alcide kAudit
  ☆36Updated 3 years ago
• kubeshield / bpf-opa-demo
  ☆31Updated 3 months ago
• kubernetes-sigs / externalip-webhook
  ClusterIP Validating Webhook
  ☆34Updated last year
• bmcustodio / kubectl-topology
  A 'kubectl' plugin that provides insight into the topology of a Kubernetes cluster.
  ☆35Updated last year
• virtual-kubelet / aws-fargate
  ☆41Updated 11 months ago
• weaveworks / libgitops
  A Go library for implementing GitOps, used by Ignite
  ☆66Updated last year
• jpweber / tokenrequest-demo
  Examples for TokenRequest blog
  ☆24Updated 5 years ago
• controlplaneio / kubesec-webhook
  Security risk analysis for Kubernetes resources
  ☆74Updated 11 months ago
• spiffe / spire-tutorials
  ☆85Updated 5 months ago
• falcosecurity-retire / falco-operator
  Kubernetes operator for Falco that allows developers to manage rules for detecting intruders and backdoors
  ☆68Updated 4 years ago
• banzaicloud / kubeconfiger
  Example tool for cleaning up untrusted kubeconfig files
  ☆36Updated 5 years ago
• square / spiffe-aws-assume-role
  This tool allows using a SPIFFE JWT to authenticate to AWS APIs
  ☆35Updated 5 months ago
• ritazh / psp-gatekeeper-policies
  ☆32Updated 4 years ago
• banzaicloud / anchore-image-validator
  Anchore Image Validator lets you automatically detect or block security issues just before a Kubernetes pod starts.
  ☆44Updated last year
• summerwind / whitebox-controller
  Extensible generic controller for Kubernetes
  ☆37Updated last year
• banzaicloud / pvc-operator
  ☆51Updated 4 years ago
• bloomberg / vault-auth-spire
  vault-auth-spire is an authentication plugin for Hashicorp Vault which allows logging into Vault using a Spire provided SVID.
  ☆41Updated last year
• krvarma / mutating-webhook
  A sidecar injector sample to demonstrate Kubernetes's Mutating Webhook.
  ☆33Updated 4 years ago
• ObjectifLibre / helm-trivy
  ☆12Updated 4 years ago
• banzaicloud / chartsec
  Helm Chart security scanner
  ☆45Updated 5 years ago
• vmware-archive / watch-proxy
  Kubernetes Inventory Beacon tool
  ☆21Updated 3 years ago
• aquasecurity / starboard-octant-plugin
  Octant plugin for viewing Starboard security information
  ☆57Updated 2 years ago
• appvia / cosign-keyless-admission-webhook
  Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
  ☆22Updated this week
• cyberark / sidecar-injector
  Sidecar Injector for the Conjur Kubernetes Authenticator and Secretless
  ☆29Updated last year
• ccojocar / sso-operator
  Single Sign-On Kubernetes operator for Dex identity provider
  ☆78Updated last year
• cilium / cilium-service-mesh-beta
  Instructions and issue tracking for Service Mesh capabilities of Cilium
  ☆104Updated 2 years ago
• ashutosh-narkar / openapi-to-rego
  Generate Rego from OpenAPI 3.0 specifications
  ☆19Updated 5 years ago
• open-policy-agent / frameworks
  ☆119Updated this week
• sysdiglabs / kube-apparmor-manager
  Manage AppAmormor profiles for Kubernetes cluster
  ☆39Updated last year