├── .devcontainer ├── devcontainer.json └── tools.sh ├── .github ├── ISSUE_TEMPLATE │ ├── config.yml │ ├── documentation.yml │ └── enhancement.yml ├── PULL_REQUEST_TEMPLATE.md ├── actions │ └── cherry-pick │ │ └── action.yaml ├── config.yml ├── dependabot.yml └── workflows │ ├── check-links.yaml │ ├── cherry-pick-on-merge.yaml │ ├── comment-commands.yaml │ └── verify-codegen.yaml ├── .gitignore ├── .lycheeignore ├── CONTRIBUTING.md ├── LICENSE ├── Makefile ├── OWNERS.md ├── README.md ├── assets ├── icons │ └── logo.svg ├── js │ ├── code.js │ ├── functions.js │ ├── policy.js │ └── variables.js └── scss │ ├── _styles_project.scss │ └── _variables_project.scss ├── config ├── _default │ ├── hugo.toml │ ├── languages.toml │ ├── markup.toml │ ├── menus │ │ └── menu.en.toml │ └── params.toml └── lychee.toml ├── content └── en │ ├── .DS_Store │ ├── _index.md │ ├── blog │ ├── _index.md │ ├── general │ │ ├── 2023-security-audit │ │ │ ├── index.md │ │ │ └── kyverno-2023-security-audit-report.pdf │ │ ├── CVE-2022-47633 │ │ │ ├── index.md │ │ │ └── kyverno-horizontal.png │ │ ├── _index.md │ │ ├── apply-vap-using-cli │ │ │ └── index.md │ │ ├── assigning-node-metadata-to-pods │ │ │ └── index.md │ │ ├── automating-cis-compliance │ │ │ ├── cis-arch.png │ │ │ ├── cis-exec.png │ │ │ └── index.md │ │ ├── aws-irsa │ │ │ └── index.md │ │ ├── chainsaw-0-1-4-awesome-features │ │ │ ├── index.md │ │ │ └── kyverno-chainsaw-horizontal.png │ │ ├── fuzzing-audit │ │ │ ├── index.md │ │ │ └── kyverno-2023-fuzzing-security-audit.pdf │ │ ├── generate-vaps │ │ │ └── index.md │ │ ├── introducing-chainsaw │ │ │ ├── index.md │ │ │ └── kyverno-chainsaw-horizontal.png │ │ ├── introducing-kyverno-envoy-plugin │ │ │ ├── arch-pod.png │ │ │ ├── arch-seprate-pod.png │ │ │ ├── index.md │ │ │ └── logo.png │ │ ├── introducing-reports-server │ │ │ ├── architecture.svg │ │ │ └── index.md │ │ ├── jmespath │ │ │ └── index.md │ │ ├── kyverno-and-service-meshes │ │ │ └── index.md │ │ ├── lets-play-kyverno │ │ │ ├── context.png │ │ │ ├── dashboard.png │ │ │ ├── index.md │ │ │ ├── results.png │ │ │ ├── share.png │ │ │ └── tutorials.png │ │ ├── new-kyverno-blog │ │ │ ├── index.md │ │ │ └── kyverno.png │ │ ├── openshift-machinesets │ │ │ └── index.md │ │ ├── optimizing-kyverno-cli-lfx-mentorship │ │ │ ├── cluster-loader.png │ │ │ ├── graduated.png │ │ │ ├── index.md │ │ │ ├── ns-cache.png │ │ │ ├── restmapper.png │ │ │ ├── results.png │ │ │ └── selection-mail.png │ │ ├── psa-better-together │ │ │ └── index.md │ │ ├── psp-migration │ │ │ └── index.md │ │ ├── slsa-3 │ │ │ ├── SupplyChainDiagram.svg │ │ │ └── index.md │ │ ├── using-cel-expressions-in-kyverno-policies │ │ │ └── index.md │ │ └── why-chainsaw-is-unique │ │ │ ├── index.md │ │ │ └── kyverno-chainsaw-horizontal.png │ └── releases │ │ ├── 1-10-0 │ │ ├── index.md │ │ ├── kyverno-horizontal.png │ │ └── kyverno-installation.png │ │ ├── 1-11-0 │ │ ├── index.md │ │ └── kyverno-horizontal.png │ │ ├── 1-12-0 │ │ ├── index.md │ │ ├── kyverno-horizontal.png │ │ ├── perfomance-comparison.png │ │ └── report-server.png │ │ ├── 1-13-0 │ │ ├── index.md │ │ └── kyverno.png │ │ ├── 1-14-0 │ │ ├── 1-14.png │ │ └── index.md │ │ ├── 1-15-0 │ │ └── index.md │ │ ├── 1-16-0 │ │ └── index.md │ │ ├── 1-8-0 │ │ ├── index.md │ │ └── kyverno.png │ │ ├── 1-9-0 │ │ ├── index.md │ │ ├── kyverno-horizontal.png │ │ └── kyverno-tracing.png │ │ └── _index.md │ ├── brian-unsplash-orion-background.jpg │ ├── community │ ├── _index.md │ └── code-of-conduct.md │ ├── docs │ ├── CRDs │ │ └── _index.md │ ├── _index.md │ ├── applying-policies │ │ └── _index.md │ ├── exceptions │ │ └── _index.md │ ├── high-availability │ │ └── _index.md │ ├── installation │ │ ├── _index.md │ │ ├── customization.md │ │ ├── methods.md │ │ ├── platform-notes.md │ │ ├── scaling.md │ │ ├── uninstallation.md │ │ └── upgrading.md │ ├── introduction │ │ ├── _index.md │ │ ├── admission-controllers.md │ │ ├── how-kyverno-works.md │ │ └── quick-start.md │ ├── kyverno-cli │ │ ├── _index.md │ │ ├── assertion-trees.md │ │ ├── install.md │ │ ├── reference │ │ │ ├── _index.md │ │ │ ├── kyverno.md │ │ │ ├── kyverno_apply.md │ │ │ ├── kyverno_completion.md │ │ │ ├── kyverno_create.md │ │ │ ├── kyverno_create_cluster-role.md │ │ │ ├── kyverno_create_exception.md │ │ │ ├── kyverno_create_metrics-config.md │ │ │ ├── kyverno_create_test.md │ │ │ ├── kyverno_create_user-info.md │ │ │ ├── kyverno_create_values.md │ │ │ ├── kyverno_docs.md │ │ │ ├── kyverno_jp.md │ │ │ ├── kyverno_jp_function.md │ │ │ ├── kyverno_jp_parse.md │ │ │ ├── kyverno_jp_query.md │ │ │ ├── kyverno_json.md │ │ │ ├── kyverno_json_scan.md │ │ │ ├── kyverno_migrate.md │ │ │ ├── kyverno_test.md │ │ │ └── kyverno_version.md │ │ └── usage │ │ │ ├── _index.md │ │ │ ├── apply.md │ │ │ ├── jp.md │ │ │ └── test.md │ ├── monitoring │ │ ├── _index.md │ │ ├── admission-requests.md │ │ ├── admission-review-latency.md │ │ ├── bonus-grafana-dashboard │ │ │ ├── dashboard-example-1.png │ │ │ ├── dashboard-example-2.png │ │ │ ├── dashboard-first-step.png │ │ │ ├── dashboard-second-step.png │ │ │ ├── dashboard-third-step.png │ │ │ └── index.md │ │ ├── cleanup-deleted-objects.md │ │ ├── cleanup-errors.md │ │ ├── cleanup-ttl-controller-deleted-objects.md │ │ ├── cleanup-ttl-controller-errors.md │ │ ├── client-queries.md │ │ ├── controller-drops.md │ │ ├── controller-reconciliations.md │ │ ├── controller-requeues.md │ │ ├── generating-policy-execution-latency.md │ │ ├── http-requests-latency.md │ │ ├── http-requests.md │ │ ├── image-validating-policy-execution-latency.md │ │ ├── kyverno-info.md │ │ ├── mutating-policy-execution-latency.md │ │ ├── opentelemetry.md │ │ ├── policy-changes.md │ │ ├── policy-execution-latency.md │ │ ├── policy-results-info.md │ │ ├── policy-rule-info-total.md │ │ └── validating-policy-execution-latency.md │ ├── policy-reports │ │ ├── _index.md │ │ ├── background.md │ │ ├── examples.md │ │ ├── openreports.md │ │ └── validatingadmissionpolicy-reports.md │ ├── policy-types │ │ ├── _index.md │ │ ├── cel-libraries │ │ │ └── _index.md │ │ ├── cleanup-policy │ │ │ └── _index.md │ │ ├── cluster-policy │ │ │ ├── _index.md │ │ │ ├── autogen.md │ │ │ ├── external-data-sources.md │ │ │ ├── generate.md │ │ │ ├── jmespath.md │ │ │ ├── match-exclude.md │ │ │ ├── mutate.md │ │ │ ├── policy-rules │ │ │ │ └── _index.md │ │ │ ├── policy-settings.md │ │ │ ├── preconditions.md │ │ │ ├── tips.md │ │ │ ├── validate.md │ │ │ ├── variables.md │ │ │ └── verify-images │ │ │ │ ├── _index.md │ │ │ │ ├── notary │ │ │ │ └── _index.md │ │ │ │ └── sigstore │ │ │ │ └── _index.md │ │ ├── deleting-policy │ │ │ └── _index.md │ │ ├── generating-policy │ │ │ └── _index.md │ │ ├── image-validating-policy │ │ │ └── _index.md │ │ ├── mutating-policy │ │ │ └── _index.md │ │ └── validating-policy │ │ │ └── _index.md │ ├── releases │ │ └── _index.md │ ├── security │ │ └── _index.md │ ├── subprojects │ │ ├── _index.md │ │ ├── backstage-plugin │ │ │ └── _index.md │ │ ├── kyverno-authz │ │ │ └── _index.md │ │ ├── kyverno-chainsaw │ │ │ └── _index.md │ │ ├── kyverno-json │ │ │ └── _index.md │ │ └── kyverno-policy-reporter │ │ │ └── _index.md │ ├── testing-policies │ │ ├── ci-fail.png │ │ ├── ci-pass.png │ │ └── index.md │ ├── tracing │ │ ├── _index.md │ │ ├── assets │ │ │ └── trace-example-1.png │ │ ├── jaeger-walkthrough │ │ │ ├── index.md │ │ │ ├── walkthrough-jaeger-1.png │ │ │ └── walkthrough-jaeger-2.png │ │ └── tempo-walkthrough │ │ │ ├── index.md │ │ │ ├── walkthrough-tempo-1.png │ │ │ └── walkthrough-tempo-2.png │ └── troubleshooting │ │ └── _index.md │ ├── gatekeeper.md │ ├── pod-security.md │ ├── policies │ ├── _index.md │ ├── argo-cel │ │ ├── application-field-validation │ │ │ └── application-field-validation.md │ │ ├── application-prevent-default-project │ │ │ └── application-prevent-default-project.md │ │ ├── application-prevent-updates-project │ │ │ └── application-prevent-updates-project.md │ │ ├── applicationset-name-matches-project │ │ │ └── applicationset-name-matches-project.md │ │ └── appproject-clusterresourceblacklist │ │ │ └── appproject-clusterresourceblacklist.md │ ├── argo │ │ ├── application-field-validation │ │ │ └── application-field-validation.md │ │ ├── application-prevent-default-project │ │ │ └── application-prevent-default-project.md │ │ ├── application-prevent-updates-project │ │ │ └── application-prevent-updates-project.md │ │ ├── applicationset-name-matches-project │ │ │ └── applicationset-name-matches-project.md │ │ ├── appproject-clusterresourceblacklist │ │ │ └── appproject-clusterresourceblacklist.md │ │ └── argo-cluster-generation-from-rancher-capi │ │ │ └── argo-cluster-generation-from-rancher-capi.md │ ├── aws-cel │ │ └── require-encryption-aws-loadbalancers │ │ │ └── require-encryption-aws-loadbalancers.md │ ├── aws │ │ ├── require-aws-node-irsa │ │ │ └── require-aws-node-irsa.md │ │ └── require-encryption-aws-loadbalancers │ │ │ └── require-encryption-aws-loadbalancers.md │ ├── best-practices-cel │ │ ├── check-deprecated-apis │ │ │ └── check-deprecated-apis.md │ │ ├── disallow-cri-sock-mount │ │ │ └── disallow-cri-sock-mount.md │ │ ├── disallow-default-namespace │ │ │ └── disallow-default-namespace.md │ │ ├── disallow-empty-ingress-host │ │ │ └── disallow-empty-ingress-host.md │ │ ├── disallow-helm-tiller │ │ │ └── disallow-helm-tiller.md │ │ ├── disallow-latest-tag │ │ │ └── disallow-latest-tag.md │ │ ├── require-drop-all │ │ │ └── require-drop-all.md │ │ ├── require-drop-cap-net-raw │ │ │ └── require-drop-cap-net-raw.md │ │ ├── require-labels │ │ │ └── require-labels.md │ │ ├── require-pod-requests-limits │ │ │ └── require-pod-requests-limits.md │ │ ├── require-probes │ │ │ └── require-probes.md │ │ ├── require-ro-rootfs │ │ │ └── require-ro-rootfs.md │ │ ├── restrict-image-registries │ │ │ └── restrict-image-registries.md │ │ ├── restrict-node-port │ │ │ └── restrict-node-port.md │ │ └── restrict-service-external-ips │ │ │ └── restrict-service-external-ips.md │ ├── best-practices-gpol │ │ ├── add-network-policy │ │ │ └── add-network-policy.md │ │ ├── add-ns-quota │ │ │ └── add-ns-quota.md │ │ └── add-rolebinding │ │ │ └── add-rolebinding.md │ ├── best-practices-mpol │ │ └── add-safe-to-evict │ │ │ └── add-safe-to-evict.md │ ├── best-practices │ │ ├── add-network-policy │ │ │ └── add-network-policy.md │ │ ├── add-networkpolicy-dns │ │ │ └── add-networkpolicy-dns.md │ │ ├── add-ns-quota │ │ │ └── add-ns-quota.md │ │ ├── add-rolebinding │ │ │ └── add-rolebinding.md │ │ ├── add-safe-to-evict │ │ │ └── add-safe-to-evict.md │ │ ├── check-deprecated-apis │ │ │ └── check-deprecated-apis.md │ │ ├── disallow-cri-sock-mount │ │ │ └── disallow-cri-sock-mount.md │ │ ├── disallow-default-namespace │ │ │ └── disallow-default-namespace.md │ │ ├── disallow-empty-ingress-host │ │ │ └── disallow-empty-ingress-host.md │ │ ├── disallow-helm-tiller │ │ │ └── disallow-helm-tiller.md │ │ ├── disallow-latest-tag │ │ │ └── disallow-latest-tag.md │ │ ├── require-drop-all │ │ │ └── require-drop-all.md │ │ ├── require-drop-cap-net-raw │ │ │ └── require-drop-cap-net-raw.md │ │ ├── require-labels │ │ │ └── require-labels.md │ │ ├── require-pod-requests-limits │ │ │ └── require-pod-requests-limits.md │ │ ├── require-probes │ │ │ └── require-probes.md │ │ ├── require-ro-rootfs │ │ │ └── require-ro-rootfs.md │ │ ├── restrict-image-registries │ │ │ └── restrict-image-registries.md │ │ ├── restrict-node-port │ │ │ └── restrict-node-port.md │ │ └── restrict-service-external-ips │ │ │ └── restrict-service-external-ips.md │ ├── castai-mpol │ │ └── add-castai-removal-disabled │ │ │ └── add-castai-removal-disabled.md │ ├── castai │ │ └── add-castai-removal-disabled │ │ │ └── add-castai-removal-disabled.md │ ├── cert-manager │ │ ├── limit-dnsnames │ │ │ └── limit-dnsnames.md │ │ ├── limit-duration │ │ │ └── limit-duration.md │ │ └── restrict-issuer │ │ │ └── restrict-issuer.md │ ├── cleanup-dpol │ │ ├── cleanup-bare-pods │ │ │ └── cleanup-bare-pods.md │ │ └── cleanup-empty-replicasets │ │ │ └── cleanup-empty-replicasets.md │ ├── cleanup │ │ ├── cleanup-bare-pods │ │ │ └── cleanup-bare-pods.md │ │ └── cleanup-empty-replicasets │ │ │ └── cleanup-empty-replicasets.md │ ├── consul-cel │ │ └── enforce-min-tls-version │ │ │ └── enforce-min-tls-version.md │ ├── consul │ │ └── enforce-min-tls-version │ │ │ └── enforce-min-tls-version.md │ ├── cost-optimization │ │ └── schedule-based-quotas │ │ │ └── schedule-based-quotas.md │ ├── external-secret-operator │ │ └── add-external-secret-prefix │ │ │ └── add-external-secret-prefix.md │ ├── flux-cel │ │ ├── verify-flux-sources │ │ │ └── verify-flux-sources.md │ │ └── verify-git-repositories │ │ │ └── verify-git-repositories.md │ ├── flux │ │ ├── generate-flux-multi-tenant-resources │ │ │ └── generate-flux-multi-tenant-resources.md │ │ ├── verify-flux-images │ │ │ └── verify-flux-images.md │ │ ├── verify-flux-sources │ │ │ └── verify-flux-sources.md │ │ └── verify-git-repositories │ │ │ └── verify-git-repositories.md │ ├── istio-cel │ │ ├── enforce-sidecar-injection-namespace │ │ │ └── enforce-sidecar-injection-namespace.md │ │ ├── enforce-strict-mtls │ │ │ └── enforce-strict-mtls.md │ │ └── prevent-disabling-injection-pods │ │ │ └── prevent-disabling-injection-pods.md │ ├── istio-mpol │ │ ├── add-ambient-mode-namespace │ │ │ └── add-ambient-mode-namespace.md │ │ └── add-sidecar-injection-namespace │ │ │ └── add-sidecar-injection-namespace.md │ ├── istio │ │ ├── add-ambient-mode-namespace │ │ │ └── add-ambient-mode-namespace.md │ │ ├── add-sidecar-injection-namespace │ │ │ └── add-sidecar-injection-namespace.md │ │ ├── create-authorizationpolicy │ │ │ └── create-authorizationpolicy.md │ │ ├── enforce-ambient-mode-namespace │ │ │ └── enforce-ambient-mode-namespace.md │ │ ├── enforce-sidecar-injection-namespace │ │ │ └── enforce-sidecar-injection-namespace.md │ │ ├── enforce-strict-mtls │ │ │ └── enforce-strict-mtls.md │ │ ├── enforce-tls-hosts-host-subnets │ │ │ └── enforce-tls-hosts-host-subnets.md │ │ ├── prevent-disabling-injection-pods │ │ │ └── prevent-disabling-injection-pods.md │ │ ├── require-authorizationpolicy │ │ │ └── require-authorizationpolicy.md │ │ ├── restrict-virtual-service-wildcard │ │ │ └── restrict-virtual-service-wildcard.md │ │ ├── service-mesh-disallow-capabilities │ │ │ └── service-mesh-disallow-capabilities.md │ │ └── service-mesh-require-run-as-nonroot │ │ │ └── service-mesh-require-run-as-nonroot.md │ ├── karpenter-mpol │ │ ├── add-karpenter-daemonset-priority-class │ │ │ └── add-karpenter-daemonset-priority-class.md │ │ ├── add-karpenter-donot-evict │ │ │ └── add-karpenter-donot-evict.md │ │ ├── add-karpenter-nodeselector │ │ │ └── add-karpenter-nodeselector.md │ │ └── set-karpenter-non-cpu-limits │ │ │ └── set-karpenter-non-cpu-limits.md │ ├── karpenter │ │ ├── add-karpenter-daemonset-priority-class │ │ │ └── add-karpenter-daemonset-priority-class.md │ │ ├── add-karpenter-donot-evict │ │ │ └── add-karpenter-donot-evict.md │ │ ├── add-karpenter-nodeselector │ │ │ └── add-karpenter-nodeselector.md │ │ └── set-karpenter-non-cpu-limits │ │ │ └── set-karpenter-non-cpu-limits.md │ ├── kasten-cel │ │ ├── k10-data-protection-by-label │ │ │ └── k10-data-protection-by-label.md │ │ ├── k10-hourly-rpo │ │ │ └── k10-hourly-rpo.md │ │ └── k10-validate-ns-by-preset-label │ │ │ └── k10-validate-ns-by-preset-label.md │ ├── kasten │ │ ├── kasten-3-2-1-backup │ │ │ └── kasten-3-2-1-backup.md │ │ ├── kasten-data-protection-by-label │ │ │ └── kasten-data-protection-by-label.md │ │ ├── kasten-generate-example-backup-policy │ │ │ └── kasten-generate-example-backup-policy.md │ │ ├── kasten-generate-policy-by-preset-label │ │ │ └── kasten-generate-policy-by-preset-label.md │ │ ├── kasten-hourly-rpo │ │ │ └── kasten-hourly-rpo.md │ │ ├── kasten-immutable-location-profile │ │ │ └── kasten-immutable-location-profile.md │ │ ├── kasten-minimum-retention │ │ │ └── kasten-minimum-retention.md │ │ └── kasten-validate-ns-by-preset-label │ │ │ └── kasten-validate-ns-by-preset-label.md │ ├── kubecost-cel │ │ └── require-kubecost-labels │ │ │ └── require-kubecost-labels.md │ ├── kubecost-mpol │ │ └── enable-kubecost-continuous-rightsizing │ │ │ └── enable-kubecost-continuous-rightsizing.md │ ├── kubecost │ │ ├── enable-kubecost-continuous-rightsizing │ │ │ └── enable-kubecost-continuous-rightsizing.md │ │ ├── kubecost-proactive-cost-control │ │ │ └── kubecost-proactive-cost-control.md │ │ └── require-kubecost-labels │ │ │ └── require-kubecost-labels.md │ ├── kubeops │ │ └── config-syncer-secret-generation-from-rancher-capi │ │ │ └── config-syncer-secret-generation-from-rancher-capi.md │ ├── kubevirt-gpol │ │ └── add-services │ │ │ └── add-services.md │ ├── kubevirt │ │ ├── add-services │ │ │ └── add-services.md │ │ └── enforce-instancetype │ │ │ └── enforce-instancetype.md │ ├── linkerd-cel │ │ ├── prevent-linkerd-pod-injection-override │ │ │ └── prevent-linkerd-pod-injection-override.md │ │ ├── prevent-linkerd-port-skipping │ │ │ └── prevent-linkerd-port-skipping.md │ │ └── require-linkerd-mesh-injection │ │ │ └── require-linkerd-mesh-injection.md │ ├── linkerd-mpol │ │ ├── add-linkerd-mesh-injection │ │ │ └── add-linkerd-mesh-injection.md │ │ └── add-linkerd-policy-annotation │ │ │ └── add-linkerd-policy-annotation.md │ ├── linkerd │ │ ├── add-linkerd-mesh-injection │ │ │ └── add-linkerd-mesh-injection.md │ │ ├── add-linkerd-policy-annotation │ │ │ └── add-linkerd-policy-annotation.md │ │ ├── check-linkerd-authorizationpolicy │ │ │ └── check-linkerd-authorizationpolicy.md │ │ ├── prevent-linkerd-pod-injection-override │ │ │ └── prevent-linkerd-pod-injection-override.md │ │ ├── prevent-linkerd-port-skipping │ │ │ └── prevent-linkerd-port-skipping.md │ │ ├── require-linkerd-mesh-injection │ │ │ └── require-linkerd-mesh-injection.md │ │ └── require-linkerd-server │ │ │ └── require-linkerd-server.md │ ├── nginx-ingress-cel │ │ ├── disallow-ingress-nginx-custom-snippets │ │ │ └── disallow-ingress-nginx-custom-snippets.md │ │ ├── restrict-annotations │ │ │ └── restrict-annotations.md │ │ └── restrict-ingress-paths │ │ │ └── restrict-ingress-paths.md │ ├── nginx-ingress │ │ ├── disallow-ingress-nginx-custom-snippets │ │ │ └── disallow-ingress-nginx-custom-snippets.md │ │ ├── restrict-annotations │ │ │ └── restrict-annotations.md │ │ └── restrict-ingress-paths │ │ │ └── restrict-ingress-paths.md │ ├── openshift-cel │ │ ├── check-routes │ │ │ └── check-routes.md │ │ ├── disallow-deprecated-apis │ │ │ └── disallow-deprecated-apis.md │ │ ├── disallow-jenkins-pipeline-strategy │ │ │ └── disallow-jenkins-pipeline-strategy.md │ │ ├── disallow-security-context-constraint-anyuid │ │ │ └── disallow-security-context-constraint-anyuid.md │ │ └── enforce-etcd-encryption │ │ │ └── enforce-etcd-encryption.md │ ├── openshift │ │ ├── check-routes │ │ │ └── check-routes.md │ │ ├── disallow-deprecated-apis │ │ │ └── disallow-deprecated-apis.md │ │ ├── disallow-jenkins-pipeline-strategy │ │ │ └── disallow-jenkins-pipeline-strategy.md │ │ ├── disallow-security-context-constraint-anyuid │ │ │ └── disallow-security-context-constraint-anyuid.md │ │ ├── disallow-self-provisioner-binding │ │ │ └── disallow-self-provisioner-binding.md │ │ ├── enforce-etcd-encryption │ │ │ └── enforce-etcd-encryption.md │ │ ├── inject-infrastructurename │ │ │ └── inject-infrastructurename.md │ │ ├── team-validate-ns-name │ │ │ └── team-validate-ns-name.md │ │ └── unique-routes │ │ │ └── unique-routes.md │ ├── other-cel │ │ ├── advanced-restrict-image-registries │ │ │ └── advanced-restrict-image-registries.md │ │ ├── allowed-annotations │ │ │ └── allowed-annotations.md │ │ ├── allowed-pod-priorities │ │ │ └── allowed-pod-priorities.md │ │ ├── block-ephemeral-containers │ │ │ └── block-ephemeral-containers.md │ │ ├── check-env-vars │ │ │ └── check-env-vars.md │ │ ├── check-node-for-cve-2022-0185 │ │ │ └── check-node-for-cve-2022-0185.md │ │ ├── check-serviceaccount-secrets │ │ │ └── check-serviceaccount-secrets.md │ │ ├── deny-commands-in-exec-probe │ │ │ └── deny-commands-in-exec-probe.md │ │ ├── deny-secret-service-account-token-type │ │ │ └── deny-secret-service-account-token-type.md │ │ ├── disallow-all-secrets │ │ │ └── disallow-all-secrets.md │ │ ├── disallow-localhost-services │ │ │ └── disallow-localhost-services.md │ │ ├── disallow-secrets-from-env-vars │ │ │ └── disallow-secrets-from-env-vars.md │ │ ├── docker-socket-requires-label │ │ │ └── docker-socket-requires-label.md │ │ ├── enforce-pod-duration │ │ │ └── enforce-pod-duration.md │ │ ├── enforce-readwriteonce-pod │ │ │ └── enforce-readwriteonce-pod.md │ │ ├── ensure-probes-different │ │ │ └── ensure-probes-different.md │ │ ├── ensure-readonly-hostpath │ │ │ └── ensure-readonly-hostpath.md │ │ ├── exclude-namespaces-dynamically │ │ │ └── exclude-namespaces-dynamically.md │ │ ├── forbid-cpu-limits │ │ │ └── forbid-cpu-limits.md │ │ ├── imagepullpolicy-always │ │ │ └── imagepullpolicy-always.md │ │ ├── ingress-host-match-tls │ │ │ └── ingress-host-match-tls.md │ │ ├── limit-containers-per-pod │ │ │ └── limit-containers-per-pod.md │ │ ├── limit-hostpath-type-pv │ │ │ └── limit-hostpath-type-pv.md │ │ ├── limit-hostpath-vols │ │ │ └── limit-hostpath-vols.md │ │ ├── memory-requests-equal-limits │ │ │ └── memory-requests-equal-limits.md │ │ ├── metadata-match-regex │ │ │ └── metadata-match-regex.md │ │ ├── pdb-maxunavailable │ │ │ └── pdb-maxunavailable.md │ │ ├── prevent-bare-pods │ │ │ └── prevent-bare-pods.md │ │ ├── prevent-cr8escape │ │ │ └── prevent-cr8escape.md │ │ ├── require-annotations │ │ │ └── require-annotations.md │ │ ├── require-container-port-names │ │ │ └── require-container-port-names.md │ │ ├── require-deployments-have-multiple-replicas │ │ │ └── require-deployments-have-multiple-replicas.md │ │ ├── require-emptydir-requests-limits │ │ │ └── require-emptydir-requests-limits.md │ │ ├── require-image-checksum │ │ │ └── require-image-checksum.md │ │ ├── require-ingress-https │ │ │ └── require-ingress-https.md │ │ ├── require-non-root-groups │ │ │ └── require-non-root-groups.md │ │ ├── require-pod-priorityclassname │ │ │ └── require-pod-priorityclassname.md │ │ ├── require-qos-burstable │ │ │ └── require-qos-burstable.md │ │ ├── require-qos-guaranteed │ │ │ └── require-qos-guaranteed.md │ │ ├── require-storageclass │ │ │ └── require-storageclass.md │ │ ├── restrict-annotations │ │ │ └── restrict-annotations.md │ │ ├── restrict-binding-clusteradmin │ │ │ └── restrict-binding-clusteradmin.md │ │ ├── restrict-binding-system-groups │ │ │ └── restrict-binding-system-groups.md │ │ ├── restrict-clusterrole-nodesproxy │ │ │ └── restrict-clusterrole-nodesproxy.md │ │ ├── restrict-controlplane-scheduling │ │ │ └── restrict-controlplane-scheduling.md │ │ ├── restrict-deprecated-registry │ │ │ └── restrict-deprecated-registry.md │ │ ├── restrict-edit-for-endpoints │ │ │ └── restrict-edit-for-endpoints.md │ │ ├── restrict-escalation-verbs-roles │ │ │ └── restrict-escalation-verbs-roles.md │ │ ├── restrict-ingress-classes │ │ │ └── restrict-ingress-classes.md │ │ ├── restrict-ingress-defaultbackend │ │ │ └── restrict-ingress-defaultbackend.md │ │ ├── restrict-ingress-wildcard │ │ │ └── restrict-ingress-wildcard.md │ │ ├── restrict-jobs │ │ │ └── restrict-jobs.md │ │ ├── restrict-loadbalancer │ │ │ └── restrict-loadbalancer.md │ │ ├── restrict-networkpolicy-empty-podselector │ │ │ └── restrict-networkpolicy-empty-podselector.md │ │ ├── restrict-node-affinity │ │ │ └── restrict-node-affinity.md │ │ ├── restrict-node-label-creation │ │ │ └── restrict-node-label-creation.md │ │ ├── restrict-pod-controller-serviceaccount-updates │ │ │ └── restrict-pod-controller-serviceaccount-updates.md │ │ ├── restrict-sa-automount-sa-token │ │ │ └── restrict-sa-automount-sa-token.md │ │ ├── restrict-secret-role-verbs │ │ │ └── restrict-secret-role-verbs.md │ │ ├── restrict-secrets-by-name │ │ │ └── restrict-secrets-by-name.md │ │ ├── restrict-service-port-range │ │ │ └── restrict-service-port-range.md │ │ ├── restrict-storageclass │ │ │ └── restrict-storageclass.md │ │ ├── restrict-usergroup-fsgroup-id │ │ │ └── restrict-usergroup-fsgroup-id.md │ │ ├── restrict-wildcard-resources │ │ │ └── restrict-wildcard-resources.md │ │ ├── restrict-wildcard-verbs │ │ │ └── restrict-wildcard-verbs.md │ │ └── topologyspreadconstraints-policy │ │ │ └── topologyspreadconstraints-policy.md │ ├── other-gpol │ │ └── create-default-pdb │ │ │ └── create-default-pdb.md │ ├── other-mpol │ │ ├── add-certificates-volume │ │ │ └── add-certificates-volume.md │ │ ├── add-default-securitycontext │ │ │ └── add-default-securitycontext.md │ │ ├── add-emptydir-sizelimit │ │ │ └── add-emptydir-sizelimit.md │ │ ├── add-env-vars-from-cm │ │ │ └── add-env-vars-from-cm.md │ │ ├── add-image-as-env-var │ │ │ └── add-image-as-env-var.md │ │ ├── add-imagepullsecrets-for-containers-and-initcontainers │ │ │ └── add-imagepullsecrets-for-containers-and-initcontainers.md │ │ ├── add-imagepullsecrets │ │ │ └── add-imagepullsecrets.md │ │ ├── add-labels │ │ │ └── add-labels.md │ │ ├── add-ndots │ │ │ └── add-ndots.md │ │ ├── add-nodeSelector │ │ │ └── add-nodeSelector.md │ │ ├── add-pod-priorityclassname │ │ │ └── add-pod-priorityclassname.md │ │ ├── add-pod-proxies │ │ │ └── add-pod-proxies.md │ │ ├── add-tolerations │ │ │ └── add-tolerations.md │ │ ├── add-ttl-jobs │ │ │ └── add-ttl-jobs.md │ │ ├── add-volume-deployment │ │ │ └── add-volume-deployment.md │ │ ├── always-pull-images │ │ │ └── always-pull-images.md │ │ ├── annotate-base-images │ │ │ └── annotate-base-images.md │ │ ├── apply-pss-restricted-profile │ │ │ └── apply-pss-restricted-profile.md │ │ ├── disable-automountserviceaccounttoken │ │ │ └── disable-automountserviceaccounttoken.md │ │ ├── disable-service-discovery │ │ │ └── disable-service-discovery.md │ │ ├── inject-sidecar-deployment │ │ │ └── inject-sidecar-deployment.md │ │ ├── label-existing-namespaces │ │ │ └── label-existing-namespaces.md │ │ ├── label-nodes-cri │ │ │ └── label-nodes-cri.md │ │ ├── mitigate-log4shell │ │ │ └── mitigate-log4shell.md │ │ ├── mutate-large-termination-gps │ │ │ └── mutate-large-termination-gps.md │ │ ├── prepend-image-registry │ │ │ └── prepend-image-registry.md │ │ ├── remove-hostpath-volumes │ │ │ └── remove-hostpath-volumes.md │ │ ├── replace-image-registry │ │ │ └── replace-image-registry.md │ │ ├── replace-ingress-hosts │ │ │ └── replace-ingress-hosts.md │ │ ├── resolve-image-to-digest │ │ │ └── resolve-image-to-digest.md │ │ ├── spread-pods-across-topology │ │ │ └── spread-pods-across-topology.md │ │ └── update-image-tag │ │ │ └── update-image-tag.md │ ├── other-vpol │ │ ├── advanced-restrict-image-registries │ │ │ └── advanced-restrict-image-registries.md │ │ ├── allowed-annotations │ │ │ └── allowed-annotations.md │ │ ├── allowed-base-images │ │ │ └── allowed-base-images.md │ │ ├── allowed-image-repos │ │ │ └── allowed-image-repos.md │ │ ├── allowed-pod-priorities │ │ │ └── allowed-pod-priorities.md │ │ ├── block-cluster-admin-from-ns │ │ │ └── block-cluster-admin-from-ns.md │ │ ├── block-images-with-volumes │ │ │ └── block-images-with-volumes.md │ │ ├── block-large-images │ │ │ └── block-large-images.md │ │ ├── check-env-vars │ │ │ └── check-env-vars.md │ │ ├── check-node-for-cve-2022-0185 │ │ │ └── check-node-for-cve-2022-0185.md │ │ ├── check-serviceaccount-secrets │ │ │ └── check-serviceaccount-secrets.md │ │ ├── deny-commands-in-exec-probe │ │ │ └── deny-commands-in-exec-probe.md │ │ ├── deny-secret-service-account-token-type │ │ │ └── deny-secret-service-account-token-type.md │ │ ├── disallow-all-secrets │ │ │ └── disallow-all-secrets.md │ │ ├── disallow-localhost-services │ │ │ └── disallow-localhost-services.md │ │ ├── disallow-secrets-from-env-vars │ │ │ └── disallow-secrets-from-env-vars.md │ │ ├── docker-socket-requires-label │ │ │ └── docker-socket-requires-label.md │ │ ├── enforce-pod-duration │ │ │ └── enforce-pod-duration.md │ │ ├── enforce-readwriteonce-pod │ │ │ └── enforce-readwriteonce-pod.md │ │ ├── ensure-probes-different │ │ │ └── ensure-probes-different.md │ │ ├── ensure-readonly-hostpath │ │ │ └── ensure-readonly-hostpath.md │ │ ├── exclude-namespaces-dynamically │ │ │ └── exclude-namespaces-dynamically.md │ │ ├── forbid-cpu-limits │ │ │ └── forbid-cpu-limits.md │ │ ├── imagepullpolicy-always │ │ │ └── imagepullpolicy-always.md │ │ ├── ingress-host-match-tls │ │ │ └── ingress-host-match-tls.md │ │ ├── limit-containers-per-pod │ │ │ └── limit-containers-per-pod.md │ │ ├── limit-hostpath-type-pv │ │ │ └── limit-hostpath-type-pv.md │ │ ├── limit-hostpath-vols │ │ │ └── limit-hostpath-vols.md │ │ ├── memory-requests-equal-limits │ │ │ └── memory-requests-equal-limits.md │ │ ├── metadata-match-regex │ │ │ └── metadata-match-regex.md │ │ ├── pdb-maxunavailable │ │ │ └── pdb-maxunavailable.md │ │ ├── prevent-bare-pods │ │ │ └── prevent-bare-pods.md │ │ ├── prevent-cr8escape │ │ │ └── prevent-cr8escape.md │ │ ├── require-annotations │ │ │ └── require-annotations.md │ │ ├── require-container-port-names │ │ │ └── require-container-port-names.md │ │ ├── require-deployments-have-multiple-replicas │ │ │ └── require-deployments-have-multiple-replicas.md │ │ ├── require-emptydir-requests-limits │ │ │ └── require-emptydir-requests-limits.md │ │ ├── require-image-checksum │ │ │ └── require-image-checksum.md │ │ ├── require-ingress-https │ │ │ └── require-ingress-https.md │ │ ├── require-non-root-groups │ │ │ ├── .kyverno-test │ │ │ │ ├── check-fsgroup.md │ │ │ │ └── check-supplementalgroups.md │ │ │ └── require-non-root-groups.md │ │ ├── require-pod-priorityclassname │ │ │ └── require-pod-priorityclassname.md │ │ ├── require-qos-burstable │ │ │ └── require-qos-burstable.md │ │ ├── require-qos-guaranteed │ │ │ └── require-qos-guaranteed.md │ │ ├── require-storageclass │ │ │ └── require-storageclass.md │ │ ├── restrict-annotations │ │ │ └── restrict-annotations.md │ │ ├── restrict-binding-clusteradmin │ │ │ └── restrict-binding-clusteradmin.md │ │ ├── restrict-binding-system-groups │ │ │ └── restrict-binding-system-groups.md │ │ ├── restrict-clusterrole-nodesproxy │ │ │ └── restrict-clusterrole-nodesproxy.md │ │ ├── restrict-controlplane-scheduling │ │ │ └── restrict-controlplane-scheduling.md │ │ ├── restrict-deprecated-registry │ │ │ └── restrict-deprecated-registry.md │ │ ├── restrict-edit-for-endpoints │ │ │ └── restrict-edit-for-endpoints.md │ │ ├── restrict-escalation-verbs-roles │ │ │ └── restrict-escalation-verbs-roles.md │ │ ├── restrict-ingress-classes │ │ │ └── restrict-ingress-classes.md │ │ ├── restrict-ingress-defaultbackend │ │ │ └── restrict-ingress-defaultbackend.md │ │ ├── restrict-ingress-wildcard │ │ │ └── restrict-ingress-wildcard.md │ │ ├── restrict-jobs │ │ │ └── restrict-jobs.md │ │ ├── restrict-loadbalancer │ │ │ └── restrict-loadbalancer.md │ │ ├── restrict-networkpolicy-empty-podselector │ │ │ └── restrict-networkpolicy-empty-podselector.md │ │ ├── restrict-node-affinity │ │ │ └── restrict-node-affinity.md │ │ ├── restrict-node-label-creation │ │ │ └── restrict-node-label-creation.md │ │ ├── restrict-pod-controller-serviceaccount-updates │ │ │ └── restrict-pod-controller-serviceaccount-updates.md │ │ ├── restrict-sa-automount-sa-token │ │ │ └── restrict-sa-automount-sa-token.md │ │ ├── restrict-secret-role-verbs │ │ │ └── restrict-secret-role-verbs.md │ │ ├── restrict-secrets-by-name │ │ │ └── restrict-secrets-by-name.md │ │ ├── restrict-service-port-range │ │ │ └── restrict-service-port-range.md │ │ ├── restrict-storageclass │ │ │ └── restrict-storageclass.md │ │ ├── restrict-usergroup-fsgroup-id │ │ │ └── restrict-usergroup-fsgroup-id.md │ │ ├── restrict-wildcard-resources │ │ │ └── restrict-wildcard-resources.md │ │ ├── restrict-wildcard-verbs │ │ │ └── restrict-wildcard-verbs.md │ │ ├── topologyspreadconstraints-policy │ │ │ └── topologyspreadconstraints-policy.md │ │ └── unique-ingress-paths │ │ │ └── unique-ingress-paths.md │ ├── other │ │ ├── add-certificates-volume │ │ │ └── add-certificates-volume.md │ │ ├── add-default-resources │ │ │ └── add-default-resources.md │ │ ├── add-default-securitycontext │ │ │ └── add-default-securitycontext.md │ │ ├── add-emptydir-sizelimit │ │ │ └── add-emptydir-sizelimit.md │ │ ├── add-env-vars-from-cm │ │ │ └── add-env-vars-from-cm.md │ │ ├── add-image-as-env-var │ │ │ └── add-image-as-env-var.md │ │ ├── add-imagepullsecrets-for-containers-and-initcontainers │ │ │ └── add-imagepullsecrets-for-containers-and-initcontainers.md │ │ ├── add-imagepullsecrets │ │ │ └── add-imagepullsecrets.md │ │ ├── add-labels │ │ │ └── add-labels.md │ │ ├── add-ndots │ │ │ └── add-ndots.md │ │ ├── add-node-affinity │ │ │ └── add-node-affinity.md │ │ ├── add-node-labels-pod │ │ │ └── add-node-labels-pod.md │ │ ├── add-nodeSelector │ │ │ └── add-nodeSelector.md │ │ ├── add-pod-priorityclassname │ │ │ └── add-pod-priorityclassname.md │ │ ├── add-pod-proxies │ │ │ └── add-pod-proxies.md │ │ ├── add-tolerations │ │ │ └── add-tolerations.md │ │ ├── add-ttl-jobs │ │ │ └── add-ttl-jobs.md │ │ ├── add-volume-deployment │ │ │ └── add-volume-deployment.md │ │ ├── advanced-restrict-image-registries │ │ │ └── advanced-restrict-image-registries.md │ │ ├── advertise-node-extended-resources │ │ │ └── advertise-node-extended-resources.md │ │ ├── allowed-annotations │ │ │ └── allowed-annotations.md │ │ ├── allowed-base-images │ │ │ └── allowed-base-images.md │ │ ├── allowed-image-repos │ │ │ └── allowed-image-repos.md │ │ ├── allowed-label-changes │ │ │ └── allowed-label-changes.md │ │ ├── allowed-pod-priorities │ │ │ └── allowed-pod-priorities.md │ │ ├── always-pull-images │ │ │ └── always-pull-images.md │ │ ├── annotate-base-images │ │ │ └── annotate-base-images.md │ │ ├── apply-pss-restricted-profile │ │ │ └── apply-pss-restricted-profile.md │ │ ├── audit-event-on-delete │ │ │ └── audit-event-on-delete.md │ │ ├── audit-event-on-exec │ │ │ └── audit-event-on-exec.md │ │ ├── block-cluster-admin-from-ns │ │ │ └── block-cluster-admin-from-ns.md │ │ ├── block-ephemeral-containers │ │ │ └── block-ephemeral-containers.md │ │ ├── block-images-with-volumes │ │ │ └── block-images-with-volumes.md │ │ ├── block-kubectl-cp │ │ │ └── block-kubectl-cp.md │ │ ├── block-large-images │ │ │ └── block-large-images.md │ │ ├── block-pod-exec-by-namespace-label │ │ │ └── block-pod-exec-by-namespace-label.md │ │ ├── block-pod-exec-by-namespace │ │ │ └── block-pod-exec-by-namespace.md │ │ ├── block-pod-exec-by-pod-and-container │ │ │ └── block-pod-exec-by-pod-and-container.md │ │ ├── block-pod-exec-by-pod-label │ │ │ └── block-pod-exec-by-pod-label.md │ │ ├── block-pod-exec-by-pod-name │ │ │ └── block-pod-exec-by-pod-name.md │ │ ├── block-stale-images │ │ │ └── block-stale-images.md │ │ ├── block-updates-deletes │ │ │ └── block-updates-deletes.md │ │ ├── check-env-vars │ │ │ └── check-env-vars.md │ │ ├── check-hpa-exists │ │ │ └── check-hpa-exists.md │ │ ├── check-ingress-nginx-controller-version-and-annotation-policy │ │ │ └── check-ingress-nginx-controller-version-and-annotation-policy.md │ │ ├── check-node-for-cve-2022-0185 │ │ │ └── check-node-for-cve-2022-0185.md │ │ ├── check-nvidia-gpu │ │ │ └── check-nvidia-gpu.md │ │ ├── check-serviceaccount-secrets │ │ │ └── check-serviceaccount-secrets.md │ │ ├── check-serviceaccount │ │ │ └── check-serviceaccount.md │ │ ├── check-subjectaccessreview │ │ │ └── check-subjectaccessreview.md │ │ ├── check-vpa-configuration │ │ │ └── check-vpa-configuration.md │ │ ├── concatenate-configmaps │ │ │ └── concatenate-configmaps.md │ │ ├── copy-namespace-labels │ │ │ └── copy-namespace-labels.md │ │ ├── cordon-and-drain-node │ │ │ └── cordon-and-drain-node.md │ │ ├── create-default-pdb │ │ │ └── create-default-pdb.md │ │ ├── create-pod-antiaffinity │ │ │ └── create-pod-antiaffinity.md │ │ ├── deny-commands-in-exec-probe │ │ │ └── deny-commands-in-exec-probe.md │ │ ├── deny-secret-service-account-token-type │ │ │ └── deny-secret-service-account-token-type.md │ │ ├── deployment-replicas-higher-than-pdb │ │ │ └── deployment-replicas-higher-than-pdb.md │ │ ├── disable-automountserviceaccounttoken │ │ │ └── disable-automountserviceaccounttoken.md │ │ ├── disable-service-discovery │ │ │ └── disable-service-discovery.md │ │ ├── disallow-all-secrets │ │ │ └── disallow-all-secrets.md │ │ ├── disallow-localhost-services │ │ │ └── disallow-localhost-services.md │ │ ├── disallow-secrets-from-env-vars │ │ │ └── disallow-secrets-from-env-vars.md │ │ ├── dns-policy-and-dns-config │ │ │ └── dns-policy-and-dns-config.md │ │ ├── docker-socket-requires-label │ │ │ └── docker-socket-requires-label.md │ │ ├── enforce-pod-duration │ │ │ └── enforce-pod-duration.md │ │ ├── enforce-readwriteonce-pod │ │ │ └── enforce-readwriteonce-pod.md │ │ ├── enforce-resources-as-ratio │ │ │ └── enforce-resources-as-ratio.md │ │ ├── ensure-probes-different │ │ │ └── ensure-probes-different.md │ │ ├── ensure-production-matches-staging │ │ │ └── ensure-production-matches-staging.md │ │ ├── ensure-readonly-hostpath │ │ │ └── ensure-readonly-hostpath.md │ │ ├── exclude-namespaces-dynamically │ │ │ └── exclude-namespaces-dynamically.md │ │ ├── expiration-for-policyexceptions │ │ │ └── expiration-for-policyexceptions.md │ │ ├── forbid-cpu-limits │ │ │ └── forbid-cpu-limits.md │ │ ├── generate-networkpolicy-existing │ │ │ └── generate-networkpolicy-existing.md │ │ ├── get-debug-information │ │ │ └── get-debug-information.md │ │ ├── imagepullpolicy-always │ │ │ └── imagepullpolicy-always.md │ │ ├── ingress-host-match-tls │ │ │ └── ingress-host-match-tls.md │ │ ├── inject-env-var-from-image-label │ │ │ └── inject-env-var-from-image-label.md │ │ ├── inject-sidecar-deployment │ │ │ └── inject-sidecar-deployment.md │ │ ├── inspect-csr │ │ │ └── inspect-csr.md │ │ ├── kubernetes-version-check │ │ │ └── kubernetes-version-check.md │ │ ├── label-existing-namespaces │ │ │ └── label-existing-namespaces.md │ │ ├── label-nodes-cri │ │ │ └── label-nodes-cri.md │ │ ├── limit-configmap-for-sa │ │ │ └── limit-configmap-for-sa.md │ │ ├── limit-containers-per-pod │ │ │ └── limit-containers-per-pod.md │ │ ├── limit-hostpath-type-pv │ │ │ └── limit-hostpath-type-pv.md │ │ ├── limit-hostpath-vols │ │ │ └── limit-hostpath-vols.md │ │ ├── memory-requests-equal-limits │ │ │ └── memory-requests-equal-limits.md │ │ ├── metadata-match-regex │ │ │ └── metadata-match-regex.md │ │ ├── mitigate-log4shell │ │ │ └── mitigate-log4shell.md │ │ ├── mutate-large-termination-gps │ │ │ └── mutate-large-termination-gps.md │ │ ├── mutate-pod-binding │ │ │ └── mutate-pod-binding.md │ │ ├── namespace-inventory-check │ │ │ └── namespace-inventory-check.md │ │ ├── namespace-protection │ │ │ └── namespace-protection.md │ │ ├── nfs-subdir-external-provisioner-storage-path │ │ │ └── nfs-subdir-external-provisioner-storage-path.md │ │ ├── only-trustworthy-registries-set-root │ │ │ └── only-trustworthy-registries-set-root.md │ │ ├── pdb-maxunavailable-with-deployments │ │ │ └── pdb-maxunavailable-with-deployments.md │ │ ├── pdb-maxunavailable │ │ │ └── pdb-maxunavailable.md │ │ ├── pdb-minavailable │ │ │ └── pdb-minavailable.md │ │ ├── policy-for-exceptions │ │ │ └── policy-for-exceptions.md │ │ ├── prepend-image-registry │ │ │ └── prepend-image-registry.md │ │ ├── prevent-bare-pods │ │ │ └── prevent-bare-pods.md │ │ ├── prevent-cr8escape │ │ │ └── prevent-cr8escape.md │ │ ├── prevent-duplicate-hpa │ │ │ └── prevent-duplicate-hpa.md │ │ ├── prevent-duplicate-vpa │ │ │ └── prevent-duplicate-vpa.md │ │ ├── protect-node-taints │ │ │ └── protect-node-taints.md │ │ ├── record-creation-details │ │ │ └── record-creation-details.md │ │ ├── refresh-env-var-in-pod │ │ │ └── refresh-env-var-in-pod.md │ │ ├── refresh-volumes-in-pods │ │ │ └── refresh-volumes-in-pods.md │ │ ├── remove-hostpath-volumes │ │ │ └── remove-hostpath-volumes.md │ │ ├── remove-serviceaccount-token │ │ │ └── remove-serviceaccount-token.md │ │ ├── replace-image-registry-with-harbor │ │ │ └── replace-image-registry-with-harbor.md │ │ ├── replace-image-registry │ │ │ └── replace-image-registry.md │ │ ├── replace-ingress-hosts │ │ │ └── replace-ingress-hosts.md │ │ ├── require-annotations │ │ │ └── require-annotations.md │ │ ├── require-base-image │ │ │ └── require-base-image.md │ │ ├── require-container-port-names │ │ │ └── require-container-port-names.md │ │ ├── require-cpu-limits │ │ │ └── require-cpu-limits.md │ │ ├── require-deployments-have-multiple-replicas │ │ │ └── require-deployments-have-multiple-replicas.md │ │ ├── require-emptydir-requests-limits │ │ │ └── require-emptydir-requests-limits.md │ │ ├── require-image-checksum │ │ │ └── require-image-checksum.md │ │ ├── require-image-source │ │ │ └── require-image-source.md │ │ ├── require-imagepullsecrets │ │ │ └── require-imagepullsecrets.md │ │ ├── require-ingress-https │ │ │ └── require-ingress-https.md │ │ ├── require-netpol │ │ │ └── require-netpol.md │ │ ├── require-non-root-groups │ │ │ └── require-non-root-groups.md │ │ ├── require-pdb │ │ │ └── require-pdb.md │ │ ├── require-pod-priorityclassname │ │ │ └── require-pod-priorityclassname.md │ │ ├── require-qos-burstable │ │ │ └── require-qos-burstable.md │ │ ├── require-qos-guaranteed │ │ │ └── require-qos-guaranteed.md │ │ ├── require-reasonable-pdbs │ │ │ └── require-reasonable-pdbs.md │ │ ├── require-replicas-allow-disruption │ │ │ └── require-replicas-allow-disruption.md │ │ ├── require-storageclass │ │ │ └── require-storageclass.md │ │ ├── require-unique-external-dns │ │ │ └── require-unique-external-dns.md │ │ ├── require-unique-service-selector │ │ │ └── require-unique-service-selector.md │ │ ├── require-unique-uid-per-workload │ │ │ └── require-unique-uid-per-workload.md │ │ ├── require-vulnerability-scan │ │ │ └── require-vulnerability-scan.md │ │ ├── resolve-image-to-digest │ │ │ └── resolve-image-to-digest.md │ │ ├── resource-creation-updating-denied │ │ │ └── resource-creation-updating-denied.md │ │ ├── restart-deployment-on-secret-change │ │ │ └── restart-deployment-on-secret-change.md │ │ ├── restrict-annotations │ │ │ └── restrict-annotations.md │ │ ├── restrict-automount-sa-token │ │ │ └── restrict-automount-sa-token.md │ │ ├── restrict-binding-clusteradmin │ │ │ └── restrict-binding-clusteradmin.md │ │ ├── restrict-binding-system-groups │ │ │ └── restrict-binding-system-groups.md │ │ ├── restrict-clusterrole-csr │ │ │ └── restrict-clusterrole-csr.md │ │ ├── restrict-clusterrole-mutating-validating-admission-webhooks │ │ │ └── restrict-clusterrole-mutating-validating-admission-webhooks.md │ │ ├── restrict-clusterrole-nodesproxy │ │ │ └── restrict-clusterrole-nodesproxy.md │ │ ├── restrict-controlplane-scheduling │ │ │ └── restrict-controlplane-scheduling.md │ │ ├── restrict-deprecated-registry │ │ │ └── restrict-deprecated-registry.md │ │ ├── restrict-edit-for-endpoints │ │ │ └── restrict-edit-for-endpoints.md │ │ ├── restrict-escalation-verbs-roles │ │ │ └── restrict-escalation-verbs-roles.md │ │ ├── restrict-ingress-classes │ │ │ └── restrict-ingress-classes.md │ │ ├── restrict-ingress-defaultbackend │ │ │ └── restrict-ingress-defaultbackend.md │ │ ├── restrict-ingress-host │ │ │ └── restrict-ingress-host.md │ │ ├── restrict-ingress-wildcard │ │ │ └── restrict-ingress-wildcard.md │ │ ├── restrict-jobs │ │ │ └── restrict-jobs.md │ │ ├── restrict-loadbalancer │ │ │ └── restrict-loadbalancer.md │ │ ├── restrict-networkpolicy-empty-podselector │ │ │ └── restrict-networkpolicy-empty-podselector.md │ │ ├── restrict-node-affinity │ │ │ └── restrict-node-affinity.md │ │ ├── restrict-node-label-changes │ │ │ └── restrict-node-label-changes.md │ │ ├── restrict-node-label-creation │ │ │ └── restrict-node-label-creation.md │ │ ├── restrict-node-selection │ │ │ └── restrict-node-selection.md │ │ ├── restrict-pod-controller-serviceaccount-updates │ │ │ └── restrict-pod-controller-serviceaccount-updates.md │ │ ├── restrict-pod-count-per-node │ │ │ └── restrict-pod-count-per-node.md │ │ ├── restrict-sa-automount-sa-token │ │ │ └── restrict-sa-automount-sa-token.md │ │ ├── restrict-scale │ │ │ └── restrict-scale.md │ │ ├── restrict-secret-role-verbs │ │ │ └── restrict-secret-role-verbs.md │ │ ├── restrict-secrets-by-label │ │ │ └── restrict-secrets-by-label.md │ │ ├── restrict-secrets-by-name │ │ │ └── restrict-secrets-by-name.md │ │ ├── restrict-service-account │ │ │ └── restrict-service-account.md │ │ ├── restrict-service-port-range │ │ │ └── restrict-service-port-range.md │ │ ├── restrict-storageclass │ │ │ └── restrict-storageclass.md │ │ ├── restrict-usergroup-fsgroup-id │ │ │ └── restrict-usergroup-fsgroup-id.md │ │ ├── restrict-wildcard-resources │ │ │ └── restrict-wildcard-resources.md │ │ ├── restrict-wildcard-verbs │ │ │ └── restrict-wildcard-verbs.md │ │ ├── scale-deployment-zero │ │ │ └── scale-deployment-zero.md │ │ ├── spread-pods-across-topology │ │ │ └── spread-pods-across-topology.md │ │ ├── sync-secrets │ │ │ └── sync-secrets.md │ │ ├── time-bound-policy │ │ │ └── time-bound-policy.md │ │ ├── topologyspreadconstraints-policy │ │ │ └── topologyspreadconstraints-policy.md │ │ ├── unique-ingress-host-and-path │ │ │ └── unique-ingress-host-and-path.md │ │ ├── unique-ingress-paths │ │ │ └── unique-ingress-paths.md │ │ ├── update-image-tag │ │ │ └── update-image-tag.md │ │ ├── verify-image-cve-2022-42889 │ │ │ └── verify-image-cve-2022-42889.md │ │ ├── verify-image-gcpkms │ │ │ └── verify-image-gcpkms.md │ │ ├── verify-image-ivpol │ │ │ └── verify-image-ivpol.md │ │ ├── verify-image-slsa │ │ │ └── verify-image-slsa.md │ │ ├── verify-image-with-multi-keys │ │ │ └── verify-image-with-multi-keys.md │ │ ├── verify-image │ │ │ └── verify-image.md │ │ ├── verify-manifest-integrity │ │ │ └── verify-manifest-integrity.md │ │ ├── verify-sbom-cyclonedx │ │ │ └── verify-sbom-cyclonedx.md │ │ └── verify-vpa-target │ │ │ └── verify-vpa-target.md │ ├── pod-security-cel │ │ ├── baseline │ │ │ ├── disallow-capabilities │ │ │ │ └── disallow-capabilities.md │ │ │ ├── disallow-host-namespaces │ │ │ │ └── disallow-host-namespaces.md │ │ │ ├── disallow-host-path │ │ │ │ └── disallow-host-path.md │ │ │ ├── disallow-host-ports-range │ │ │ │ └── disallow-host-ports-range.md │ │ │ ├── disallow-host-ports │ │ │ │ └── disallow-host-ports.md │ │ │ ├── disallow-host-process │ │ │ │ └── disallow-host-process.md │ │ │ ├── disallow-privileged-containers │ │ │ │ └── disallow-privileged-containers.md │ │ │ ├── disallow-proc-mount │ │ │ │ └── disallow-proc-mount.md │ │ │ ├── disallow-selinux │ │ │ │ └── disallow-selinux.md │ │ │ ├── restrict-seccomp │ │ │ │ └── restrict-seccomp.md │ │ │ └── restrict-sysctls │ │ │ │ └── restrict-sysctls.md │ │ └── restricted │ │ │ ├── disallow-capabilities-strict │ │ │ └── disallow-capabilities-strict.md │ │ │ ├── disallow-privilege-escalation │ │ │ └── disallow-privilege-escalation.md │ │ │ ├── require-run-as-non-root-user │ │ │ └── require-run-as-non-root-user.md │ │ │ ├── require-run-as-nonroot │ │ │ └── require-run-as-nonroot.md │ │ │ ├── restrict-seccomp-strict │ │ │ └── restrict-seccomp-strict.md │ │ │ └── restrict-volume-types │ │ │ └── restrict-volume-types.md │ ├── pod-security-vpol │ │ ├── baseline │ │ │ ├── disallow-capabilities │ │ │ │ └── disallow-capabilities.md │ │ │ ├── disallow-host-namespaces │ │ │ │ └── disallow-host-namespaces.md │ │ │ ├── disallow-host-path │ │ │ │ └── disallow-host-path.md │ │ │ ├── disallow-host-ports │ │ │ │ └── disallow-host-ports.md │ │ │ ├── disallow-host-process │ │ │ │ └── disallow-host-process.md │ │ │ ├── disallow-privileged-containers │ │ │ │ └── disallow-privileged-containers.md │ │ │ ├── disallow-proc-mount │ │ │ │ └── disallow-proc-mount.md │ │ │ ├── disallow-selinux │ │ │ │ └── disallow-selinux.md │ │ │ ├── restrict-seccomp │ │ │ │ └── restrict-seccomp.md │ │ │ └── restrict-sysctls │ │ │ │ └── restrict-sysctls.md │ │ └── restricted │ │ │ ├── disallow-capabilities-strict │ │ │ ├── .kyverno-test │ │ │ │ └── adding-capabilities-strict.md │ │ │ └── disallow-capabilities-strict.md │ │ │ ├── disallow-privilege-escalation │ │ │ └── disallow-privilege-escalation.md │ │ │ ├── require-run-as-non-root-user │ │ │ └── require-run-as-non-root-user.md │ │ │ ├── require-run-as-nonroot │ │ │ └── require-run-as-nonroot.md │ │ │ ├── restrict-seccomp-strict │ │ │ └── restrict-seccomp-strict.md │ │ │ └── restrict-volume-types │ │ │ └── restrict-volume-types.md │ ├── pod-security │ │ ├── baseline │ │ │ ├── disallow-capabilities │ │ │ │ └── disallow-capabilities.md │ │ │ ├── disallow-host-namespaces │ │ │ │ └── disallow-host-namespaces.md │ │ │ ├── disallow-host-path │ │ │ │ └── disallow-host-path.md │ │ │ ├── disallow-host-ports-range │ │ │ │ └── disallow-host-ports-range.md │ │ │ ├── disallow-host-ports │ │ │ │ └── disallow-host-ports.md │ │ │ ├── disallow-host-process │ │ │ │ └── disallow-host-process.md │ │ │ ├── disallow-privileged-containers │ │ │ │ └── disallow-privileged-containers.md │ │ │ ├── disallow-proc-mount │ │ │ │ └── disallow-proc-mount.md │ │ │ ├── disallow-selinux │ │ │ │ └── disallow-selinux.md │ │ │ ├── restrict-apparmor-profiles │ │ │ │ └── restrict-apparmor-profiles.md │ │ │ ├── restrict-seccomp │ │ │ │ └── restrict-seccomp.md │ │ │ └── restrict-sysctls │ │ │ │ └── restrict-sysctls.md │ │ ├── restricted │ │ │ ├── disallow-capabilities-strict │ │ │ │ └── disallow-capabilities-strict.md │ │ │ ├── disallow-privilege-escalation │ │ │ │ └── disallow-privilege-escalation.md │ │ │ ├── require-run-as-non-root-user │ │ │ │ └── require-run-as-non-root-user.md │ │ │ ├── require-run-as-nonroot │ │ │ │ └── require-run-as-nonroot.md │ │ │ ├── restrict-seccomp-strict │ │ │ │ └── restrict-seccomp-strict.md │ │ │ └── restrict-volume-types │ │ │ │ └── restrict-volume-types.md │ │ └── subrule │ │ │ ├── podsecurity-subrule-baseline │ │ │ └── podsecurity-subrule-baseline.md │ │ │ └── restricted │ │ │ ├── restricted-exclude-capabilities │ │ │ └── restricted-exclude-capabilities.md │ │ │ ├── restricted-exclude-seccomp │ │ │ └── restricted-exclude-seccomp.md │ │ │ └── restricted-latest │ │ │ └── restricted-latest.md │ ├── psa-cel │ │ ├── add-psa-namespace-reporting │ │ │ └── add-psa-namespace-reporting.md │ │ └── deny-privileged-profile │ │ │ └── deny-privileged-profile.md │ ├── psa-mpol │ │ ├── add-privileged-existing-namespaces │ │ │ └── add-privileged-existing-namespaces.md │ │ └── add-psa-labels │ │ │ └── add-psa-labels.md │ ├── psa │ │ ├── add-privileged-existing-namespaces │ │ │ └── add-privileged-existing-namespaces.md │ │ ├── add-psa-labels │ │ │ └── add-psa-labels.md │ │ ├── add-psa-namespace-reporting │ │ │ └── add-psa-namespace-reporting.md │ │ └── deny-privileged-profile │ │ │ └── deny-privileged-profile.md │ ├── psp-migration-cel │ │ ├── check-supplemental-groups │ │ │ └── check-supplemental-groups.md │ │ ├── restrict-adding-capabilities │ │ │ └── restrict-adding-capabilities.md │ │ └── restrict-runtimeClassName │ │ │ └── restrict-runtimeClassName.md │ ├── psp-migration-mpol │ │ ├── add-apparmor │ │ │ └── add-apparmor.md │ │ ├── add-capabilities │ │ │ └── add-capabilities.md │ │ └── add-runtimeClassName │ │ │ └── add-runtimeClassName.md │ ├── psp-migration │ │ ├── add-apparmor │ │ │ └── add-apparmor.md │ │ ├── add-capabilities │ │ │ └── add-capabilities.md │ │ ├── add-runtimeClassName │ │ │ └── add-runtimeClassName.md │ │ ├── check-supplemental-groups │ │ │ └── check-supplemental-groups.md │ │ ├── restrict-adding-capabilities │ │ │ └── restrict-adding-capabilities.md │ │ └── restrict-runtimeClassName │ │ │ └── restrict-runtimeClassName.md │ ├── tekton-cel │ │ ├── block-tekton-task-runs │ │ │ └── block-tekton-task-runs.md │ │ └── require-tekton-bundle │ │ │ └── require-tekton-bundle.md │ ├── tekton │ │ ├── block-tekton-task-runs │ │ │ └── block-tekton-task-runs.md │ │ ├── require-tekton-bundle │ │ │ └── require-tekton-bundle.md │ │ ├── require-tekton-namespace-pipelinerun │ │ │ └── require-tekton-namespace-pipelinerun.md │ │ ├── require-tekton-securitycontext │ │ │ └── require-tekton-securitycontext.md │ │ ├── verify-tekton-pipeline-bundle-signatures │ │ │ └── verify-tekton-pipeline-bundle-signatures.md │ │ ├── verify-tekton-taskrun-signatures │ │ │ └── verify-tekton-taskrun-signatures.md │ │ └── verify-tekton-taskrun-vuln-scan │ │ │ └── verify-tekton-taskrun-vuln-scan.md │ ├── traefik-cel │ │ └── disallow-default-tlsoptions │ │ │ └── disallow-default-tlsoptions.md │ ├── traefik │ │ └── disallow-default-tlsoptions │ │ │ └── disallow-default-tlsoptions.md │ ├── velero-cel │ │ ├── block-velero-restore │ │ │ └── block-velero-restore.md │ │ └── validate-cron-schedule │ │ │ └── validate-cron-schedule.md │ ├── velero-mpol │ │ └── backup-all-volumes │ │ │ └── backup-all-volumes.md │ ├── velero │ │ ├── backup-all-volumes │ │ │ └── backup-all-volumes.md │ │ ├── block-velero-restore │ │ │ └── block-velero-restore.md │ │ └── validate-cron-schedule │ │ │ └── validate-cron-schedule.md │ └── windows-security │ │ └── require-run-as-containeruser │ │ └── require-run-as-containeruser.md │ ├── search.md │ └── support │ ├── _index.md │ ├── blakyaks │ └── _index.md │ ├── giantswarm │ └── _index.md │ ├── infracloud │ └── _index.md │ ├── kodekloud │ └── _index.md │ └── nirmata │ └── _index.md ├── go.mod ├── go.sum ├── hugo.work ├── hugo.work.sum ├── i18n └── en.toml ├── layouts ├── 404.html ├── _default │ └── _markup │ │ ├── render-heading.html │ │ ├── render-image.html │ │ └── render-link.html ├── index.json ├── partials │ ├── back-button.html │ ├── breadcrumb.html │ ├── footer.html │ ├── functions │ │ └── getCodeConfig.html │ ├── hooks │ │ ├── body-end.html │ │ └── head-end.html │ ├── icon-sprites.html │ ├── navbar-version-selector.html │ ├── navbar.html │ ├── page-meta-links.html │ ├── policies │ │ ├── sidebar.html │ │ └── toggle.html │ ├── scripts │ │ └── mermaid.html │ └── sidebar-tree.html ├── policies │ ├── list.html │ └── single.html └── shortcodes │ ├── feature-state.html │ ├── videos.html │ └── youtube.html ├── netlify.toml ├── render ├── README.md ├── git.go ├── go.mod ├── go.sum ├── main.go ├── render.go ├── root.go └── template.go ├── scripts └── hash-files.sh └── static ├── favicons ├── _head.html ├── apple-touch-icon-180x180.png ├── browserconfig.xml ├── favicon-16x16.png ├── favicon-32x32.png ├── favicon.ico ├── pwa-192x192.png ├── pwa-512x512.png ├── tile150x150.png ├── tile310x150.png ├── tile310x310.png └── tile70x70.png ├── icons ├── carly.svg ├── copy.svg ├── expand.svg └── order.svg ├── images ├── Kyverno-Policy-Structure.png ├── kubernetes-admission-controllers.png ├── kyverno-architecture.png ├── kyverno-installation.png ├── kyverno_website_graphics.pptx ├── logo_cloudnative.png ├── nirmata-wt.png ├── nirmata.png └── verify-image-rule.png └── logos ├── adidas.png ├── bloomberg.png ├── deutsche-telekom.png ├── linkedin.png ├── razorpay.png ├── robinhood.png ├── spotify.png ├── us-dod.png ├── vodafone.png ├── wayfair.png └── yahoo.png /.devcontainer/devcontainer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.devcontainer/devcontainer.json -------------------------------------------------------------------------------- /.devcontainer/tools.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.devcontainer/tools.sh -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/ISSUE_TEMPLATE/config.yml -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/documentation.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/ISSUE_TEMPLATE/documentation.yml -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/enhancement.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/ISSUE_TEMPLATE/enhancement.yml -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/actions/cherry-pick/action.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/actions/cherry-pick/action.yaml -------------------------------------------------------------------------------- /.github/config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/config.yml -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/workflows/check-links.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/workflows/check-links.yaml -------------------------------------------------------------------------------- /.github/workflows/cherry-pick-on-merge.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/workflows/cherry-pick-on-merge.yaml -------------------------------------------------------------------------------- /.github/workflows/comment-commands.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/workflows/comment-commands.yaml -------------------------------------------------------------------------------- /.github/workflows/verify-codegen.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.github/workflows/verify-codegen.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.gitignore -------------------------------------------------------------------------------- /.lycheeignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/.lycheeignore -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/Makefile -------------------------------------------------------------------------------- /OWNERS.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/OWNERS.md -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/README.md -------------------------------------------------------------------------------- /assets/icons/logo.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/icons/logo.svg -------------------------------------------------------------------------------- /assets/js/code.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/js/code.js -------------------------------------------------------------------------------- /assets/js/functions.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/js/functions.js -------------------------------------------------------------------------------- /assets/js/policy.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/js/policy.js -------------------------------------------------------------------------------- /assets/js/variables.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/js/variables.js -------------------------------------------------------------------------------- /assets/scss/_styles_project.scss: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/scss/_styles_project.scss -------------------------------------------------------------------------------- /assets/scss/_variables_project.scss: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/assets/scss/_variables_project.scss -------------------------------------------------------------------------------- /config/_default/hugo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/_default/hugo.toml -------------------------------------------------------------------------------- /config/_default/languages.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/_default/languages.toml -------------------------------------------------------------------------------- /config/_default/markup.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/_default/markup.toml -------------------------------------------------------------------------------- /config/_default/menus/menu.en.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/_default/menus/menu.en.toml -------------------------------------------------------------------------------- /config/_default/params.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/_default/params.toml -------------------------------------------------------------------------------- /config/lychee.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/config/lychee.toml -------------------------------------------------------------------------------- /content/en/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/.DS_Store -------------------------------------------------------------------------------- /content/en/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/_index.md -------------------------------------------------------------------------------- /content/en/blog/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/_index.md -------------------------------------------------------------------------------- /content/en/blog/general/2023-security-audit/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/2023-security-audit/index.md -------------------------------------------------------------------------------- /content/en/blog/general/2023-security-audit/kyverno-2023-security-audit-report.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/2023-security-audit/kyverno-2023-security-audit-report.pdf -------------------------------------------------------------------------------- /content/en/blog/general/CVE-2022-47633/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/CVE-2022-47633/index.md -------------------------------------------------------------------------------- /content/en/blog/general/CVE-2022-47633/kyverno-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/CVE-2022-47633/kyverno-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/general/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/_index.md -------------------------------------------------------------------------------- /content/en/blog/general/apply-vap-using-cli/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/apply-vap-using-cli/index.md -------------------------------------------------------------------------------- /content/en/blog/general/assigning-node-metadata-to-pods/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/assigning-node-metadata-to-pods/index.md -------------------------------------------------------------------------------- /content/en/blog/general/automating-cis-compliance/cis-arch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/automating-cis-compliance/cis-arch.png -------------------------------------------------------------------------------- /content/en/blog/general/automating-cis-compliance/cis-exec.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/automating-cis-compliance/cis-exec.png -------------------------------------------------------------------------------- /content/en/blog/general/automating-cis-compliance/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/automating-cis-compliance/index.md -------------------------------------------------------------------------------- /content/en/blog/general/aws-irsa/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/aws-irsa/index.md -------------------------------------------------------------------------------- /content/en/blog/general/chainsaw-0-1-4-awesome-features/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/chainsaw-0-1-4-awesome-features/index.md -------------------------------------------------------------------------------- /content/en/blog/general/chainsaw-0-1-4-awesome-features/kyverno-chainsaw-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/chainsaw-0-1-4-awesome-features/kyverno-chainsaw-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/general/fuzzing-audit/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/fuzzing-audit/index.md -------------------------------------------------------------------------------- /content/en/blog/general/fuzzing-audit/kyverno-2023-fuzzing-security-audit.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/fuzzing-audit/kyverno-2023-fuzzing-security-audit.pdf -------------------------------------------------------------------------------- /content/en/blog/general/generate-vaps/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/generate-vaps/index.md -------------------------------------------------------------------------------- /content/en/blog/general/introducing-chainsaw/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-chainsaw/index.md -------------------------------------------------------------------------------- /content/en/blog/general/introducing-chainsaw/kyverno-chainsaw-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-chainsaw/kyverno-chainsaw-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/general/introducing-kyverno-envoy-plugin/arch-pod.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-kyverno-envoy-plugin/arch-pod.png -------------------------------------------------------------------------------- /content/en/blog/general/introducing-kyverno-envoy-plugin/arch-seprate-pod.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-kyverno-envoy-plugin/arch-seprate-pod.png -------------------------------------------------------------------------------- /content/en/blog/general/introducing-kyverno-envoy-plugin/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-kyverno-envoy-plugin/index.md -------------------------------------------------------------------------------- /content/en/blog/general/introducing-kyverno-envoy-plugin/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-kyverno-envoy-plugin/logo.png -------------------------------------------------------------------------------- /content/en/blog/general/introducing-reports-server/architecture.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-reports-server/architecture.svg -------------------------------------------------------------------------------- /content/en/blog/general/introducing-reports-server/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/introducing-reports-server/index.md -------------------------------------------------------------------------------- /content/en/blog/general/jmespath/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/jmespath/index.md -------------------------------------------------------------------------------- /content/en/blog/general/kyverno-and-service-meshes/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/kyverno-and-service-meshes/index.md -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/context.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/context.png -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/dashboard.png -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/index.md -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/results.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/results.png -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/share.png -------------------------------------------------------------------------------- /content/en/blog/general/lets-play-kyverno/tutorials.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/lets-play-kyverno/tutorials.png -------------------------------------------------------------------------------- /content/en/blog/general/new-kyverno-blog/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/new-kyverno-blog/index.md -------------------------------------------------------------------------------- /content/en/blog/general/new-kyverno-blog/kyverno.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/new-kyverno-blog/kyverno.png -------------------------------------------------------------------------------- /content/en/blog/general/openshift-machinesets/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/openshift-machinesets/index.md -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/cluster-loader.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/cluster-loader.png -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/graduated.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/graduated.png -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/index.md -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/ns-cache.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/ns-cache.png -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/restmapper.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/restmapper.png -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/results.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/results.png -------------------------------------------------------------------------------- /content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/selection-mail.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/optimizing-kyverno-cli-lfx-mentorship/selection-mail.png -------------------------------------------------------------------------------- /content/en/blog/general/psa-better-together/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/psa-better-together/index.md -------------------------------------------------------------------------------- /content/en/blog/general/psp-migration/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/psp-migration/index.md -------------------------------------------------------------------------------- /content/en/blog/general/slsa-3/SupplyChainDiagram.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/slsa-3/SupplyChainDiagram.svg -------------------------------------------------------------------------------- /content/en/blog/general/slsa-3/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/slsa-3/index.md -------------------------------------------------------------------------------- /content/en/blog/general/using-cel-expressions-in-kyverno-policies/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/using-cel-expressions-in-kyverno-policies/index.md -------------------------------------------------------------------------------- /content/en/blog/general/why-chainsaw-is-unique/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/why-chainsaw-is-unique/index.md -------------------------------------------------------------------------------- /content/en/blog/general/why-chainsaw-is-unique/kyverno-chainsaw-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/general/why-chainsaw-is-unique/kyverno-chainsaw-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-10-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-10-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-10-0/kyverno-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-10-0/kyverno-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-10-0/kyverno-installation.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-10-0/kyverno-installation.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-11-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-11-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-11-0/kyverno-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-11-0/kyverno-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-12-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-12-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-12-0/kyverno-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-12-0/kyverno-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-12-0/perfomance-comparison.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-12-0/perfomance-comparison.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-12-0/report-server.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-12-0/report-server.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-13-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-13-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-13-0/kyverno.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-13-0/kyverno.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-14-0/1-14.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-14-0/1-14.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-14-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-14-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-15-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-15-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-16-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-16-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-8-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-8-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-8-0/kyverno.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-8-0/kyverno.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-9-0/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-9-0/index.md -------------------------------------------------------------------------------- /content/en/blog/releases/1-9-0/kyverno-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-9-0/kyverno-horizontal.png -------------------------------------------------------------------------------- /content/en/blog/releases/1-9-0/kyverno-tracing.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/1-9-0/kyverno-tracing.png -------------------------------------------------------------------------------- /content/en/blog/releases/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/blog/releases/_index.md -------------------------------------------------------------------------------- /content/en/brian-unsplash-orion-background.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/brian-unsplash-orion-background.jpg -------------------------------------------------------------------------------- /content/en/community/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/community/_index.md -------------------------------------------------------------------------------- /content/en/community/code-of-conduct.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/community/code-of-conduct.md -------------------------------------------------------------------------------- /content/en/docs/CRDs/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/CRDs/_index.md -------------------------------------------------------------------------------- /content/en/docs/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/_index.md -------------------------------------------------------------------------------- /content/en/docs/applying-policies/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/applying-policies/_index.md -------------------------------------------------------------------------------- /content/en/docs/exceptions/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/exceptions/_index.md -------------------------------------------------------------------------------- /content/en/docs/high-availability/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/high-availability/_index.md -------------------------------------------------------------------------------- /content/en/docs/installation/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/_index.md -------------------------------------------------------------------------------- /content/en/docs/installation/customization.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/customization.md -------------------------------------------------------------------------------- /content/en/docs/installation/methods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/methods.md -------------------------------------------------------------------------------- /content/en/docs/installation/platform-notes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/platform-notes.md -------------------------------------------------------------------------------- /content/en/docs/installation/scaling.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/scaling.md -------------------------------------------------------------------------------- /content/en/docs/installation/uninstallation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/uninstallation.md -------------------------------------------------------------------------------- /content/en/docs/installation/upgrading.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/installation/upgrading.md -------------------------------------------------------------------------------- /content/en/docs/introduction/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/introduction/_index.md -------------------------------------------------------------------------------- /content/en/docs/introduction/admission-controllers.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/introduction/admission-controllers.md -------------------------------------------------------------------------------- /content/en/docs/introduction/how-kyverno-works.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/introduction/how-kyverno-works.md -------------------------------------------------------------------------------- /content/en/docs/introduction/quick-start.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/introduction/quick-start.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/_index.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/assertion-trees.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/assertion-trees.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/install.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/install.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/_index.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_apply.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_apply.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_completion.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_completion.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_cluster-role.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_cluster-role.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_exception.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_exception.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_metrics-config.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_metrics-config.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_test.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_test.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_user-info.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_user-info.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_create_values.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_create_values.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_docs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_docs.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_jp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_jp.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_jp_function.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_jp_function.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_jp_parse.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_jp_parse.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_jp_query.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_jp_query.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_json.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_json.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_json_scan.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_json_scan.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_migrate.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_migrate.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_test.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_test.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/reference/kyverno_version.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/reference/kyverno_version.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/usage/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/usage/_index.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/usage/apply.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/usage/apply.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/usage/jp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/usage/jp.md -------------------------------------------------------------------------------- /content/en/docs/kyverno-cli/usage/test.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/kyverno-cli/usage/test.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/_index.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/admission-requests.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/admission-requests.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/admission-review-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/admission-review-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-example-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-example-1.png -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-example-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-example-2.png -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-first-step.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-first-step.png -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-second-step.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-second-step.png -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-third-step.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/dashboard-third-step.png -------------------------------------------------------------------------------- /content/en/docs/monitoring/bonus-grafana-dashboard/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/bonus-grafana-dashboard/index.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/cleanup-deleted-objects.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/cleanup-deleted-objects.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/cleanup-errors.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/cleanup-errors.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/cleanup-ttl-controller-deleted-objects.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/cleanup-ttl-controller-deleted-objects.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/cleanup-ttl-controller-errors.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/cleanup-ttl-controller-errors.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/client-queries.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/client-queries.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/controller-drops.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/controller-drops.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/controller-reconciliations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/controller-reconciliations.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/controller-requeues.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/controller-requeues.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/generating-policy-execution-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/generating-policy-execution-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/http-requests-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/http-requests-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/http-requests.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/http-requests.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/image-validating-policy-execution-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/image-validating-policy-execution-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/kyverno-info.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/kyverno-info.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/mutating-policy-execution-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/mutating-policy-execution-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/opentelemetry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/opentelemetry.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/policy-changes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/policy-changes.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/policy-execution-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/policy-execution-latency.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/policy-results-info.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/policy-results-info.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/policy-rule-info-total.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/policy-rule-info-total.md -------------------------------------------------------------------------------- /content/en/docs/monitoring/validating-policy-execution-latency.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/monitoring/validating-policy-execution-latency.md -------------------------------------------------------------------------------- /content/en/docs/policy-reports/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-reports/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-reports/background.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-reports/background.md -------------------------------------------------------------------------------- /content/en/docs/policy-reports/examples.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-reports/examples.md -------------------------------------------------------------------------------- /content/en/docs/policy-reports/openreports.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-reports/openreports.md -------------------------------------------------------------------------------- /content/en/docs/policy-reports/validatingadmissionpolicy-reports.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-reports/validatingadmissionpolicy-reports.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cel-libraries/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cel-libraries/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cleanup-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cleanup-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/autogen.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/autogen.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/external-data-sources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/external-data-sources.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/generate.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/generate.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/jmespath.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/jmespath.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/match-exclude.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/match-exclude.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/mutate.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/mutate.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/policy-rules/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/policy-rules/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/policy-settings.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/policy-settings.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/preconditions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/preconditions.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/tips.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/tips.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/validate.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/validate.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/variables.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/variables.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/verify-images/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/verify-images/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/verify-images/notary/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/verify-images/notary/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/cluster-policy/verify-images/sigstore/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/cluster-policy/verify-images/sigstore/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/deleting-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/deleting-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/generating-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/generating-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/image-validating-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/image-validating-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/mutating-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/mutating-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/policy-types/validating-policy/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/policy-types/validating-policy/_index.md -------------------------------------------------------------------------------- /content/en/docs/releases/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/releases/_index.md -------------------------------------------------------------------------------- /content/en/docs/security/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/security/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/backstage-plugin/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/backstage-plugin/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/kyverno-authz/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/kyverno-authz/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/kyverno-chainsaw/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/kyverno-chainsaw/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/kyverno-json/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/kyverno-json/_index.md -------------------------------------------------------------------------------- /content/en/docs/subprojects/kyverno-policy-reporter/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/subprojects/kyverno-policy-reporter/_index.md -------------------------------------------------------------------------------- /content/en/docs/testing-policies/ci-fail.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/testing-policies/ci-fail.png -------------------------------------------------------------------------------- /content/en/docs/testing-policies/ci-pass.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/testing-policies/ci-pass.png -------------------------------------------------------------------------------- /content/en/docs/testing-policies/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/testing-policies/index.md -------------------------------------------------------------------------------- /content/en/docs/tracing/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/_index.md -------------------------------------------------------------------------------- /content/en/docs/tracing/assets/trace-example-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/assets/trace-example-1.png -------------------------------------------------------------------------------- /content/en/docs/tracing/jaeger-walkthrough/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/jaeger-walkthrough/index.md -------------------------------------------------------------------------------- /content/en/docs/tracing/jaeger-walkthrough/walkthrough-jaeger-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/jaeger-walkthrough/walkthrough-jaeger-1.png -------------------------------------------------------------------------------- /content/en/docs/tracing/jaeger-walkthrough/walkthrough-jaeger-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/jaeger-walkthrough/walkthrough-jaeger-2.png -------------------------------------------------------------------------------- /content/en/docs/tracing/tempo-walkthrough/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/tempo-walkthrough/index.md -------------------------------------------------------------------------------- /content/en/docs/tracing/tempo-walkthrough/walkthrough-tempo-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/tempo-walkthrough/walkthrough-tempo-1.png -------------------------------------------------------------------------------- /content/en/docs/tracing/tempo-walkthrough/walkthrough-tempo-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/tracing/tempo-walkthrough/walkthrough-tempo-2.png -------------------------------------------------------------------------------- /content/en/docs/troubleshooting/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/docs/troubleshooting/_index.md -------------------------------------------------------------------------------- /content/en/gatekeeper.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/gatekeeper.md -------------------------------------------------------------------------------- /content/en/pod-security.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/pod-security.md -------------------------------------------------------------------------------- /content/en/policies/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/_index.md -------------------------------------------------------------------------------- /content/en/policies/argo-cel/application-field-validation/application-field-validation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/argo-cel/application-field-validation/application-field-validation.md -------------------------------------------------------------------------------- /content/en/policies/argo/application-field-validation/application-field-validation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/argo/application-field-validation/application-field-validation.md -------------------------------------------------------------------------------- /content/en/policies/aws/require-aws-node-irsa/require-aws-node-irsa.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/aws/require-aws-node-irsa/require-aws-node-irsa.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/check-deprecated-apis/check-deprecated-apis.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/check-deprecated-apis/check-deprecated-apis.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/disallow-cri-sock-mount/disallow-cri-sock-mount.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/disallow-cri-sock-mount/disallow-cri-sock-mount.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/disallow-helm-tiller/disallow-helm-tiller.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/disallow-helm-tiller/disallow-helm-tiller.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/disallow-latest-tag/disallow-latest-tag.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/disallow-latest-tag/disallow-latest-tag.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/require-drop-all/require-drop-all.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/require-drop-all/require-drop-all.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/require-drop-cap-net-raw/require-drop-cap-net-raw.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/require-drop-cap-net-raw/require-drop-cap-net-raw.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/require-labels/require-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/require-labels/require-labels.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/require-probes/require-probes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/require-probes/require-probes.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/require-ro-rootfs/require-ro-rootfs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/require-ro-rootfs/require-ro-rootfs.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-cel/restrict-node-port/restrict-node-port.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-cel/restrict-node-port/restrict-node-port.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-gpol/add-network-policy/add-network-policy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-gpol/add-network-policy/add-network-policy.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-gpol/add-ns-quota/add-ns-quota.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-gpol/add-ns-quota/add-ns-quota.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-gpol/add-rolebinding/add-rolebinding.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-gpol/add-rolebinding/add-rolebinding.md -------------------------------------------------------------------------------- /content/en/policies/best-practices-mpol/add-safe-to-evict/add-safe-to-evict.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices-mpol/add-safe-to-evict/add-safe-to-evict.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/add-network-policy/add-network-policy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/add-network-policy/add-network-policy.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/add-networkpolicy-dns/add-networkpolicy-dns.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/add-networkpolicy-dns/add-networkpolicy-dns.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/add-ns-quota/add-ns-quota.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/add-ns-quota/add-ns-quota.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/add-rolebinding/add-rolebinding.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/add-rolebinding/add-rolebinding.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/add-safe-to-evict/add-safe-to-evict.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/add-safe-to-evict/add-safe-to-evict.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/check-deprecated-apis/check-deprecated-apis.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/check-deprecated-apis/check-deprecated-apis.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/disallow-cri-sock-mount/disallow-cri-sock-mount.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/disallow-cri-sock-mount/disallow-cri-sock-mount.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/disallow-default-namespace/disallow-default-namespace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/disallow-default-namespace/disallow-default-namespace.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/disallow-helm-tiller/disallow-helm-tiller.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/disallow-helm-tiller/disallow-helm-tiller.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/disallow-latest-tag/disallow-latest-tag.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/disallow-latest-tag/disallow-latest-tag.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/require-drop-all/require-drop-all.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/require-drop-all/require-drop-all.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/require-drop-cap-net-raw/require-drop-cap-net-raw.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/require-drop-cap-net-raw/require-drop-cap-net-raw.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/require-labels/require-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/require-labels/require-labels.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/require-probes/require-probes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/require-probes/require-probes.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/require-ro-rootfs/require-ro-rootfs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/require-ro-rootfs/require-ro-rootfs.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/restrict-image-registries/restrict-image-registries.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/restrict-image-registries/restrict-image-registries.md -------------------------------------------------------------------------------- /content/en/policies/best-practices/restrict-node-port/restrict-node-port.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/best-practices/restrict-node-port/restrict-node-port.md -------------------------------------------------------------------------------- /content/en/policies/castai-mpol/add-castai-removal-disabled/add-castai-removal-disabled.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/castai-mpol/add-castai-removal-disabled/add-castai-removal-disabled.md -------------------------------------------------------------------------------- /content/en/policies/castai/add-castai-removal-disabled/add-castai-removal-disabled.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/castai/add-castai-removal-disabled/add-castai-removal-disabled.md -------------------------------------------------------------------------------- /content/en/policies/cert-manager/limit-dnsnames/limit-dnsnames.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cert-manager/limit-dnsnames/limit-dnsnames.md -------------------------------------------------------------------------------- /content/en/policies/cert-manager/limit-duration/limit-duration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cert-manager/limit-duration/limit-duration.md -------------------------------------------------------------------------------- /content/en/policies/cert-manager/restrict-issuer/restrict-issuer.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cert-manager/restrict-issuer/restrict-issuer.md -------------------------------------------------------------------------------- /content/en/policies/cleanup-dpol/cleanup-bare-pods/cleanup-bare-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cleanup-dpol/cleanup-bare-pods/cleanup-bare-pods.md -------------------------------------------------------------------------------- /content/en/policies/cleanup-dpol/cleanup-empty-replicasets/cleanup-empty-replicasets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cleanup-dpol/cleanup-empty-replicasets/cleanup-empty-replicasets.md -------------------------------------------------------------------------------- /content/en/policies/cleanup/cleanup-bare-pods/cleanup-bare-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cleanup/cleanup-bare-pods/cleanup-bare-pods.md -------------------------------------------------------------------------------- /content/en/policies/cleanup/cleanup-empty-replicasets/cleanup-empty-replicasets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cleanup/cleanup-empty-replicasets/cleanup-empty-replicasets.md -------------------------------------------------------------------------------- /content/en/policies/consul-cel/enforce-min-tls-version/enforce-min-tls-version.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/consul-cel/enforce-min-tls-version/enforce-min-tls-version.md -------------------------------------------------------------------------------- /content/en/policies/consul/enforce-min-tls-version/enforce-min-tls-version.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/consul/enforce-min-tls-version/enforce-min-tls-version.md -------------------------------------------------------------------------------- /content/en/policies/cost-optimization/schedule-based-quotas/schedule-based-quotas.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/cost-optimization/schedule-based-quotas/schedule-based-quotas.md -------------------------------------------------------------------------------- /content/en/policies/flux-cel/verify-flux-sources/verify-flux-sources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/flux-cel/verify-flux-sources/verify-flux-sources.md -------------------------------------------------------------------------------- /content/en/policies/flux-cel/verify-git-repositories/verify-git-repositories.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/flux-cel/verify-git-repositories/verify-git-repositories.md -------------------------------------------------------------------------------- /content/en/policies/flux/verify-flux-images/verify-flux-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/flux/verify-flux-images/verify-flux-images.md -------------------------------------------------------------------------------- /content/en/policies/flux/verify-flux-sources/verify-flux-sources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/flux/verify-flux-sources/verify-flux-sources.md -------------------------------------------------------------------------------- /content/en/policies/flux/verify-git-repositories/verify-git-repositories.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/flux/verify-git-repositories/verify-git-repositories.md -------------------------------------------------------------------------------- /content/en/policies/istio-cel/enforce-strict-mtls/enforce-strict-mtls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio-cel/enforce-strict-mtls/enforce-strict-mtls.md -------------------------------------------------------------------------------- /content/en/policies/istio-mpol/add-ambient-mode-namespace/add-ambient-mode-namespace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio-mpol/add-ambient-mode-namespace/add-ambient-mode-namespace.md -------------------------------------------------------------------------------- /content/en/policies/istio/add-ambient-mode-namespace/add-ambient-mode-namespace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/add-ambient-mode-namespace/add-ambient-mode-namespace.md -------------------------------------------------------------------------------- /content/en/policies/istio/create-authorizationpolicy/create-authorizationpolicy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/create-authorizationpolicy/create-authorizationpolicy.md -------------------------------------------------------------------------------- /content/en/policies/istio/enforce-ambient-mode-namespace/enforce-ambient-mode-namespace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/enforce-ambient-mode-namespace/enforce-ambient-mode-namespace.md -------------------------------------------------------------------------------- /content/en/policies/istio/enforce-strict-mtls/enforce-strict-mtls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/enforce-strict-mtls/enforce-strict-mtls.md -------------------------------------------------------------------------------- /content/en/policies/istio/enforce-tls-hosts-host-subnets/enforce-tls-hosts-host-subnets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/enforce-tls-hosts-host-subnets/enforce-tls-hosts-host-subnets.md -------------------------------------------------------------------------------- /content/en/policies/istio/require-authorizationpolicy/require-authorizationpolicy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/istio/require-authorizationpolicy/require-authorizationpolicy.md -------------------------------------------------------------------------------- /content/en/policies/karpenter-mpol/add-karpenter-donot-evict/add-karpenter-donot-evict.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/karpenter-mpol/add-karpenter-donot-evict/add-karpenter-donot-evict.md -------------------------------------------------------------------------------- /content/en/policies/karpenter-mpol/add-karpenter-nodeselector/add-karpenter-nodeselector.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/karpenter-mpol/add-karpenter-nodeselector/add-karpenter-nodeselector.md -------------------------------------------------------------------------------- /content/en/policies/karpenter/add-karpenter-donot-evict/add-karpenter-donot-evict.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/karpenter/add-karpenter-donot-evict/add-karpenter-donot-evict.md -------------------------------------------------------------------------------- /content/en/policies/karpenter/add-karpenter-nodeselector/add-karpenter-nodeselector.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/karpenter/add-karpenter-nodeselector/add-karpenter-nodeselector.md -------------------------------------------------------------------------------- /content/en/policies/karpenter/set-karpenter-non-cpu-limits/set-karpenter-non-cpu-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/karpenter/set-karpenter-non-cpu-limits/set-karpenter-non-cpu-limits.md -------------------------------------------------------------------------------- /content/en/policies/kasten-cel/k10-data-protection-by-label/k10-data-protection-by-label.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kasten-cel/k10-data-protection-by-label/k10-data-protection-by-label.md -------------------------------------------------------------------------------- /content/en/policies/kasten-cel/k10-hourly-rpo/k10-hourly-rpo.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kasten-cel/k10-hourly-rpo/k10-hourly-rpo.md -------------------------------------------------------------------------------- /content/en/policies/kasten/kasten-3-2-1-backup/kasten-3-2-1-backup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kasten/kasten-3-2-1-backup/kasten-3-2-1-backup.md -------------------------------------------------------------------------------- /content/en/policies/kasten/kasten-hourly-rpo/kasten-hourly-rpo.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kasten/kasten-hourly-rpo/kasten-hourly-rpo.md -------------------------------------------------------------------------------- /content/en/policies/kasten/kasten-minimum-retention/kasten-minimum-retention.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kasten/kasten-minimum-retention/kasten-minimum-retention.md -------------------------------------------------------------------------------- /content/en/policies/kubecost-cel/require-kubecost-labels/require-kubecost-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kubecost-cel/require-kubecost-labels/require-kubecost-labels.md -------------------------------------------------------------------------------- /content/en/policies/kubecost/require-kubecost-labels/require-kubecost-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kubecost/require-kubecost-labels/require-kubecost-labels.md -------------------------------------------------------------------------------- /content/en/policies/kubevirt-gpol/add-services/add-services.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kubevirt-gpol/add-services/add-services.md -------------------------------------------------------------------------------- /content/en/policies/kubevirt/add-services/add-services.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kubevirt/add-services/add-services.md -------------------------------------------------------------------------------- /content/en/policies/kubevirt/enforce-instancetype/enforce-instancetype.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/kubevirt/enforce-instancetype/enforce-instancetype.md -------------------------------------------------------------------------------- /content/en/policies/linkerd-mpol/add-linkerd-mesh-injection/add-linkerd-mesh-injection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/linkerd-mpol/add-linkerd-mesh-injection/add-linkerd-mesh-injection.md -------------------------------------------------------------------------------- /content/en/policies/linkerd/add-linkerd-mesh-injection/add-linkerd-mesh-injection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/linkerd/add-linkerd-mesh-injection/add-linkerd-mesh-injection.md -------------------------------------------------------------------------------- /content/en/policies/linkerd/add-linkerd-policy-annotation/add-linkerd-policy-annotation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/linkerd/add-linkerd-policy-annotation/add-linkerd-policy-annotation.md -------------------------------------------------------------------------------- /content/en/policies/linkerd/prevent-linkerd-port-skipping/prevent-linkerd-port-skipping.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/linkerd/prevent-linkerd-port-skipping/prevent-linkerd-port-skipping.md -------------------------------------------------------------------------------- /content/en/policies/linkerd/require-linkerd-server/require-linkerd-server.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/linkerd/require-linkerd-server/require-linkerd-server.md -------------------------------------------------------------------------------- /content/en/policies/nginx-ingress-cel/restrict-annotations/restrict-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/nginx-ingress-cel/restrict-annotations/restrict-annotations.md -------------------------------------------------------------------------------- /content/en/policies/nginx-ingress-cel/restrict-ingress-paths/restrict-ingress-paths.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/nginx-ingress-cel/restrict-ingress-paths/restrict-ingress-paths.md -------------------------------------------------------------------------------- /content/en/policies/nginx-ingress/restrict-annotations/restrict-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/nginx-ingress/restrict-annotations/restrict-annotations.md -------------------------------------------------------------------------------- /content/en/policies/nginx-ingress/restrict-ingress-paths/restrict-ingress-paths.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/nginx-ingress/restrict-ingress-paths/restrict-ingress-paths.md -------------------------------------------------------------------------------- /content/en/policies/openshift-cel/check-routes/check-routes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift-cel/check-routes/check-routes.md -------------------------------------------------------------------------------- /content/en/policies/openshift-cel/disallow-deprecated-apis/disallow-deprecated-apis.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift-cel/disallow-deprecated-apis/disallow-deprecated-apis.md -------------------------------------------------------------------------------- /content/en/policies/openshift-cel/enforce-etcd-encryption/enforce-etcd-encryption.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift-cel/enforce-etcd-encryption/enforce-etcd-encryption.md -------------------------------------------------------------------------------- /content/en/policies/openshift/check-routes/check-routes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/check-routes/check-routes.md -------------------------------------------------------------------------------- /content/en/policies/openshift/disallow-deprecated-apis/disallow-deprecated-apis.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/disallow-deprecated-apis/disallow-deprecated-apis.md -------------------------------------------------------------------------------- /content/en/policies/openshift/enforce-etcd-encryption/enforce-etcd-encryption.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/enforce-etcd-encryption/enforce-etcd-encryption.md -------------------------------------------------------------------------------- /content/en/policies/openshift/inject-infrastructurename/inject-infrastructurename.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/inject-infrastructurename/inject-infrastructurename.md -------------------------------------------------------------------------------- /content/en/policies/openshift/team-validate-ns-name/team-validate-ns-name.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/team-validate-ns-name/team-validate-ns-name.md -------------------------------------------------------------------------------- /content/en/policies/openshift/unique-routes/unique-routes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/openshift/unique-routes/unique-routes.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/allowed-annotations/allowed-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/allowed-annotations/allowed-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/allowed-pod-priorities/allowed-pod-priorities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/allowed-pod-priorities/allowed-pod-priorities.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/block-ephemeral-containers/block-ephemeral-containers.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/block-ephemeral-containers/block-ephemeral-containers.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/check-env-vars/check-env-vars.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/check-env-vars/check-env-vars.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/deny-commands-in-exec-probe/deny-commands-in-exec-probe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/deny-commands-in-exec-probe/deny-commands-in-exec-probe.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/disallow-all-secrets/disallow-all-secrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/disallow-all-secrets/disallow-all-secrets.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/disallow-localhost-services/disallow-localhost-services.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/disallow-localhost-services/disallow-localhost-services.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/enforce-pod-duration/enforce-pod-duration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/enforce-pod-duration/enforce-pod-duration.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/ensure-probes-different/ensure-probes-different.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/ensure-probes-different/ensure-probes-different.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/ensure-readonly-hostpath/ensure-readonly-hostpath.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/ensure-readonly-hostpath/ensure-readonly-hostpath.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/forbid-cpu-limits/forbid-cpu-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/forbid-cpu-limits/forbid-cpu-limits.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/imagepullpolicy-always/imagepullpolicy-always.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/imagepullpolicy-always/imagepullpolicy-always.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/ingress-host-match-tls/ingress-host-match-tls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/ingress-host-match-tls/ingress-host-match-tls.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/limit-containers-per-pod/limit-containers-per-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/limit-containers-per-pod/limit-containers-per-pod.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/limit-hostpath-type-pv/limit-hostpath-type-pv.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/limit-hostpath-type-pv/limit-hostpath-type-pv.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/limit-hostpath-vols/limit-hostpath-vols.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/limit-hostpath-vols/limit-hostpath-vols.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/metadata-match-regex/metadata-match-regex.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/metadata-match-regex/metadata-match-regex.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/pdb-maxunavailable/pdb-maxunavailable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/pdb-maxunavailable/pdb-maxunavailable.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/prevent-bare-pods/prevent-bare-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/prevent-bare-pods/prevent-bare-pods.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/prevent-cr8escape/prevent-cr8escape.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/prevent-cr8escape/prevent-cr8escape.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-annotations/require-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-annotations/require-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-image-checksum/require-image-checksum.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-image-checksum/require-image-checksum.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-ingress-https/require-ingress-https.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-ingress-https/require-ingress-https.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-non-root-groups/require-non-root-groups.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-non-root-groups/require-non-root-groups.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-qos-burstable/require-qos-burstable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-qos-burstable/require-qos-burstable.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-qos-guaranteed/require-qos-guaranteed.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-qos-guaranteed/require-qos-guaranteed.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/require-storageclass/require-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/require-storageclass/require-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-annotations/restrict-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-annotations/restrict-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-edit-for-endpoints/restrict-edit-for-endpoints.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-edit-for-endpoints/restrict-edit-for-endpoints.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-ingress-classes/restrict-ingress-classes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-ingress-classes/restrict-ingress-classes.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-ingress-wildcard/restrict-ingress-wildcard.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-ingress-wildcard/restrict-ingress-wildcard.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-jobs/restrict-jobs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-jobs/restrict-jobs.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-loadbalancer/restrict-loadbalancer.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-loadbalancer/restrict-loadbalancer.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-node-affinity/restrict-node-affinity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-node-affinity/restrict-node-affinity.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-secret-role-verbs/restrict-secret-role-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-secret-role-verbs/restrict-secret-role-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-secrets-by-name/restrict-secrets-by-name.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-secrets-by-name/restrict-secrets-by-name.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-service-port-range/restrict-service-port-range.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-service-port-range/restrict-service-port-range.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-storageclass/restrict-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-storageclass/restrict-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-wildcard-resources/restrict-wildcard-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-wildcard-resources/restrict-wildcard-resources.md -------------------------------------------------------------------------------- /content/en/policies/other-cel/restrict-wildcard-verbs/restrict-wildcard-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-cel/restrict-wildcard-verbs/restrict-wildcard-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other-gpol/create-default-pdb/create-default-pdb.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-gpol/create-default-pdb/create-default-pdb.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-certificates-volume/add-certificates-volume.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-certificates-volume/add-certificates-volume.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-emptydir-sizelimit/add-emptydir-sizelimit.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-emptydir-sizelimit/add-emptydir-sizelimit.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-env-vars-from-cm/add-env-vars-from-cm.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-env-vars-from-cm/add-env-vars-from-cm.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-image-as-env-var/add-image-as-env-var.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-image-as-env-var/add-image-as-env-var.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-imagepullsecrets/add-imagepullsecrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-imagepullsecrets/add-imagepullsecrets.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-labels/add-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-labels/add-labels.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-ndots/add-ndots.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-ndots/add-ndots.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-nodeSelector/add-nodeSelector.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-nodeSelector/add-nodeSelector.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-pod-priorityclassname/add-pod-priorityclassname.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-pod-priorityclassname/add-pod-priorityclassname.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-pod-proxies/add-pod-proxies.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-pod-proxies/add-pod-proxies.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-tolerations/add-tolerations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-tolerations/add-tolerations.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-ttl-jobs/add-ttl-jobs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-ttl-jobs/add-ttl-jobs.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/add-volume-deployment/add-volume-deployment.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/add-volume-deployment/add-volume-deployment.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/always-pull-images/always-pull-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/always-pull-images/always-pull-images.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/annotate-base-images/annotate-base-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/annotate-base-images/annotate-base-images.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/disable-service-discovery/disable-service-discovery.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/disable-service-discovery/disable-service-discovery.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/inject-sidecar-deployment/inject-sidecar-deployment.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/inject-sidecar-deployment/inject-sidecar-deployment.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/label-existing-namespaces/label-existing-namespaces.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/label-existing-namespaces/label-existing-namespaces.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/label-nodes-cri/label-nodes-cri.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/label-nodes-cri/label-nodes-cri.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/mitigate-log4shell/mitigate-log4shell.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/mitigate-log4shell/mitigate-log4shell.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/prepend-image-registry/prepend-image-registry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/prepend-image-registry/prepend-image-registry.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/remove-hostpath-volumes/remove-hostpath-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/remove-hostpath-volumes/remove-hostpath-volumes.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/replace-image-registry/replace-image-registry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/replace-image-registry/replace-image-registry.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/replace-ingress-hosts/replace-ingress-hosts.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/replace-ingress-hosts/replace-ingress-hosts.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/resolve-image-to-digest/resolve-image-to-digest.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/resolve-image-to-digest/resolve-image-to-digest.md -------------------------------------------------------------------------------- /content/en/policies/other-mpol/update-image-tag/update-image-tag.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-mpol/update-image-tag/update-image-tag.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/allowed-annotations/allowed-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/allowed-annotations/allowed-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/allowed-base-images/allowed-base-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/allowed-base-images/allowed-base-images.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/allowed-image-repos/allowed-image-repos.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/allowed-image-repos/allowed-image-repos.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/allowed-pod-priorities/allowed-pod-priorities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/allowed-pod-priorities/allowed-pod-priorities.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/block-images-with-volumes/block-images-with-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/block-images-with-volumes/block-images-with-volumes.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/block-large-images/block-large-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/block-large-images/block-large-images.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/check-env-vars/check-env-vars.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/check-env-vars/check-env-vars.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/disallow-all-secrets/disallow-all-secrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/disallow-all-secrets/disallow-all-secrets.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/enforce-pod-duration/enforce-pod-duration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/enforce-pod-duration/enforce-pod-duration.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/ensure-probes-different/ensure-probes-different.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/ensure-probes-different/ensure-probes-different.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/ensure-readonly-hostpath/ensure-readonly-hostpath.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/ensure-readonly-hostpath/ensure-readonly-hostpath.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/forbid-cpu-limits/forbid-cpu-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/forbid-cpu-limits/forbid-cpu-limits.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/imagepullpolicy-always/imagepullpolicy-always.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/imagepullpolicy-always/imagepullpolicy-always.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/ingress-host-match-tls/ingress-host-match-tls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/ingress-host-match-tls/ingress-host-match-tls.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/limit-containers-per-pod/limit-containers-per-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/limit-containers-per-pod/limit-containers-per-pod.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/limit-hostpath-type-pv/limit-hostpath-type-pv.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/limit-hostpath-type-pv/limit-hostpath-type-pv.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/limit-hostpath-vols/limit-hostpath-vols.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/limit-hostpath-vols/limit-hostpath-vols.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/metadata-match-regex/metadata-match-regex.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/metadata-match-regex/metadata-match-regex.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/pdb-maxunavailable/pdb-maxunavailable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/pdb-maxunavailable/pdb-maxunavailable.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/prevent-bare-pods/prevent-bare-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/prevent-bare-pods/prevent-bare-pods.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/prevent-cr8escape/prevent-cr8escape.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/prevent-cr8escape/prevent-cr8escape.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-annotations/require-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-annotations/require-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-image-checksum/require-image-checksum.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-image-checksum/require-image-checksum.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-ingress-https/require-ingress-https.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-ingress-https/require-ingress-https.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-non-root-groups/.kyverno-test/check-fsgroup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-non-root-groups/.kyverno-test/check-fsgroup.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-non-root-groups/require-non-root-groups.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-non-root-groups/require-non-root-groups.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-qos-burstable/require-qos-burstable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-qos-burstable/require-qos-burstable.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-qos-guaranteed/require-qos-guaranteed.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-qos-guaranteed/require-qos-guaranteed.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/require-storageclass/require-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/require-storageclass/require-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-annotations/restrict-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-annotations/restrict-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-ingress-classes/restrict-ingress-classes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-ingress-classes/restrict-ingress-classes.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-ingress-wildcard/restrict-ingress-wildcard.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-ingress-wildcard/restrict-ingress-wildcard.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-jobs/restrict-jobs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-jobs/restrict-jobs.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-loadbalancer/restrict-loadbalancer.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-loadbalancer/restrict-loadbalancer.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-node-affinity/restrict-node-affinity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-node-affinity/restrict-node-affinity.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-secret-role-verbs/restrict-secret-role-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-secret-role-verbs/restrict-secret-role-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-secrets-by-name/restrict-secrets-by-name.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-secrets-by-name/restrict-secrets-by-name.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-storageclass/restrict-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-storageclass/restrict-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/restrict-wildcard-verbs/restrict-wildcard-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/restrict-wildcard-verbs/restrict-wildcard-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other-vpol/unique-ingress-paths/unique-ingress-paths.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other-vpol/unique-ingress-paths/unique-ingress-paths.md -------------------------------------------------------------------------------- /content/en/policies/other/add-certificates-volume/add-certificates-volume.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-certificates-volume/add-certificates-volume.md -------------------------------------------------------------------------------- /content/en/policies/other/add-default-resources/add-default-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-default-resources/add-default-resources.md -------------------------------------------------------------------------------- /content/en/policies/other/add-default-securitycontext/add-default-securitycontext.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-default-securitycontext/add-default-securitycontext.md -------------------------------------------------------------------------------- /content/en/policies/other/add-emptydir-sizelimit/add-emptydir-sizelimit.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-emptydir-sizelimit/add-emptydir-sizelimit.md -------------------------------------------------------------------------------- /content/en/policies/other/add-env-vars-from-cm/add-env-vars-from-cm.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-env-vars-from-cm/add-env-vars-from-cm.md -------------------------------------------------------------------------------- /content/en/policies/other/add-image-as-env-var/add-image-as-env-var.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-image-as-env-var/add-image-as-env-var.md -------------------------------------------------------------------------------- /content/en/policies/other/add-imagepullsecrets/add-imagepullsecrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-imagepullsecrets/add-imagepullsecrets.md -------------------------------------------------------------------------------- /content/en/policies/other/add-labels/add-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-labels/add-labels.md -------------------------------------------------------------------------------- /content/en/policies/other/add-ndots/add-ndots.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-ndots/add-ndots.md -------------------------------------------------------------------------------- /content/en/policies/other/add-node-affinity/add-node-affinity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-node-affinity/add-node-affinity.md -------------------------------------------------------------------------------- /content/en/policies/other/add-node-labels-pod/add-node-labels-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-node-labels-pod/add-node-labels-pod.md -------------------------------------------------------------------------------- /content/en/policies/other/add-nodeSelector/add-nodeSelector.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-nodeSelector/add-nodeSelector.md -------------------------------------------------------------------------------- /content/en/policies/other/add-pod-priorityclassname/add-pod-priorityclassname.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-pod-priorityclassname/add-pod-priorityclassname.md -------------------------------------------------------------------------------- /content/en/policies/other/add-pod-proxies/add-pod-proxies.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-pod-proxies/add-pod-proxies.md -------------------------------------------------------------------------------- /content/en/policies/other/add-tolerations/add-tolerations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-tolerations/add-tolerations.md -------------------------------------------------------------------------------- /content/en/policies/other/add-ttl-jobs/add-ttl-jobs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-ttl-jobs/add-ttl-jobs.md -------------------------------------------------------------------------------- /content/en/policies/other/add-volume-deployment/add-volume-deployment.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/add-volume-deployment/add-volume-deployment.md -------------------------------------------------------------------------------- /content/en/policies/other/allowed-annotations/allowed-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/allowed-annotations/allowed-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other/allowed-base-images/allowed-base-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/allowed-base-images/allowed-base-images.md -------------------------------------------------------------------------------- /content/en/policies/other/allowed-image-repos/allowed-image-repos.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/allowed-image-repos/allowed-image-repos.md -------------------------------------------------------------------------------- /content/en/policies/other/allowed-label-changes/allowed-label-changes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/allowed-label-changes/allowed-label-changes.md -------------------------------------------------------------------------------- /content/en/policies/other/allowed-pod-priorities/allowed-pod-priorities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/allowed-pod-priorities/allowed-pod-priorities.md -------------------------------------------------------------------------------- /content/en/policies/other/always-pull-images/always-pull-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/always-pull-images/always-pull-images.md -------------------------------------------------------------------------------- /content/en/policies/other/annotate-base-images/annotate-base-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/annotate-base-images/annotate-base-images.md -------------------------------------------------------------------------------- /content/en/policies/other/apply-pss-restricted-profile/apply-pss-restricted-profile.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/apply-pss-restricted-profile/apply-pss-restricted-profile.md -------------------------------------------------------------------------------- /content/en/policies/other/audit-event-on-delete/audit-event-on-delete.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/audit-event-on-delete/audit-event-on-delete.md -------------------------------------------------------------------------------- /content/en/policies/other/audit-event-on-exec/audit-event-on-exec.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/audit-event-on-exec/audit-event-on-exec.md -------------------------------------------------------------------------------- /content/en/policies/other/block-cluster-admin-from-ns/block-cluster-admin-from-ns.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-cluster-admin-from-ns/block-cluster-admin-from-ns.md -------------------------------------------------------------------------------- /content/en/policies/other/block-ephemeral-containers/block-ephemeral-containers.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-ephemeral-containers/block-ephemeral-containers.md -------------------------------------------------------------------------------- /content/en/policies/other/block-images-with-volumes/block-images-with-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-images-with-volumes/block-images-with-volumes.md -------------------------------------------------------------------------------- /content/en/policies/other/block-kubectl-cp/block-kubectl-cp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-kubectl-cp/block-kubectl-cp.md -------------------------------------------------------------------------------- /content/en/policies/other/block-large-images/block-large-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-large-images/block-large-images.md -------------------------------------------------------------------------------- /content/en/policies/other/block-pod-exec-by-namespace/block-pod-exec-by-namespace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-pod-exec-by-namespace/block-pod-exec-by-namespace.md -------------------------------------------------------------------------------- /content/en/policies/other/block-pod-exec-by-pod-label/block-pod-exec-by-pod-label.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-pod-exec-by-pod-label/block-pod-exec-by-pod-label.md -------------------------------------------------------------------------------- /content/en/policies/other/block-pod-exec-by-pod-name/block-pod-exec-by-pod-name.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-pod-exec-by-pod-name/block-pod-exec-by-pod-name.md -------------------------------------------------------------------------------- /content/en/policies/other/block-stale-images/block-stale-images.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-stale-images/block-stale-images.md -------------------------------------------------------------------------------- /content/en/policies/other/block-updates-deletes/block-updates-deletes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/block-updates-deletes/block-updates-deletes.md -------------------------------------------------------------------------------- /content/en/policies/other/check-env-vars/check-env-vars.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-env-vars/check-env-vars.md -------------------------------------------------------------------------------- /content/en/policies/other/check-hpa-exists/check-hpa-exists.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-hpa-exists/check-hpa-exists.md -------------------------------------------------------------------------------- /content/en/policies/other/check-node-for-cve-2022-0185/check-node-for-cve-2022-0185.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-node-for-cve-2022-0185/check-node-for-cve-2022-0185.md -------------------------------------------------------------------------------- /content/en/policies/other/check-nvidia-gpu/check-nvidia-gpu.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-nvidia-gpu/check-nvidia-gpu.md -------------------------------------------------------------------------------- /content/en/policies/other/check-serviceaccount-secrets/check-serviceaccount-secrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-serviceaccount-secrets/check-serviceaccount-secrets.md -------------------------------------------------------------------------------- /content/en/policies/other/check-serviceaccount/check-serviceaccount.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-serviceaccount/check-serviceaccount.md -------------------------------------------------------------------------------- /content/en/policies/other/check-subjectaccessreview/check-subjectaccessreview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-subjectaccessreview/check-subjectaccessreview.md -------------------------------------------------------------------------------- /content/en/policies/other/check-vpa-configuration/check-vpa-configuration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/check-vpa-configuration/check-vpa-configuration.md -------------------------------------------------------------------------------- /content/en/policies/other/concatenate-configmaps/concatenate-configmaps.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/concatenate-configmaps/concatenate-configmaps.md -------------------------------------------------------------------------------- /content/en/policies/other/copy-namespace-labels/copy-namespace-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/copy-namespace-labels/copy-namespace-labels.md -------------------------------------------------------------------------------- /content/en/policies/other/cordon-and-drain-node/cordon-and-drain-node.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/cordon-and-drain-node/cordon-and-drain-node.md -------------------------------------------------------------------------------- /content/en/policies/other/create-default-pdb/create-default-pdb.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/create-default-pdb/create-default-pdb.md -------------------------------------------------------------------------------- /content/en/policies/other/create-pod-antiaffinity/create-pod-antiaffinity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/create-pod-antiaffinity/create-pod-antiaffinity.md -------------------------------------------------------------------------------- /content/en/policies/other/deny-commands-in-exec-probe/deny-commands-in-exec-probe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/deny-commands-in-exec-probe/deny-commands-in-exec-probe.md -------------------------------------------------------------------------------- /content/en/policies/other/disable-service-discovery/disable-service-discovery.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/disable-service-discovery/disable-service-discovery.md -------------------------------------------------------------------------------- /content/en/policies/other/disallow-all-secrets/disallow-all-secrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/disallow-all-secrets/disallow-all-secrets.md -------------------------------------------------------------------------------- /content/en/policies/other/disallow-localhost-services/disallow-localhost-services.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/disallow-localhost-services/disallow-localhost-services.md -------------------------------------------------------------------------------- /content/en/policies/other/dns-policy-and-dns-config/dns-policy-and-dns-config.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/dns-policy-and-dns-config/dns-policy-and-dns-config.md -------------------------------------------------------------------------------- /content/en/policies/other/docker-socket-requires-label/docker-socket-requires-label.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/docker-socket-requires-label/docker-socket-requires-label.md -------------------------------------------------------------------------------- /content/en/policies/other/enforce-pod-duration/enforce-pod-duration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/enforce-pod-duration/enforce-pod-duration.md -------------------------------------------------------------------------------- /content/en/policies/other/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/enforce-readwriteonce-pod/enforce-readwriteonce-pod.md -------------------------------------------------------------------------------- /content/en/policies/other/enforce-resources-as-ratio/enforce-resources-as-ratio.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/enforce-resources-as-ratio/enforce-resources-as-ratio.md -------------------------------------------------------------------------------- /content/en/policies/other/ensure-probes-different/ensure-probes-different.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/ensure-probes-different/ensure-probes-different.md -------------------------------------------------------------------------------- /content/en/policies/other/ensure-readonly-hostpath/ensure-readonly-hostpath.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/ensure-readonly-hostpath/ensure-readonly-hostpath.md -------------------------------------------------------------------------------- /content/en/policies/other/forbid-cpu-limits/forbid-cpu-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/forbid-cpu-limits/forbid-cpu-limits.md -------------------------------------------------------------------------------- /content/en/policies/other/get-debug-information/get-debug-information.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/get-debug-information/get-debug-information.md -------------------------------------------------------------------------------- /content/en/policies/other/imagepullpolicy-always/imagepullpolicy-always.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/imagepullpolicy-always/imagepullpolicy-always.md -------------------------------------------------------------------------------- /content/en/policies/other/ingress-host-match-tls/ingress-host-match-tls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/ingress-host-match-tls/ingress-host-match-tls.md -------------------------------------------------------------------------------- /content/en/policies/other/inject-sidecar-deployment/inject-sidecar-deployment.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/inject-sidecar-deployment/inject-sidecar-deployment.md -------------------------------------------------------------------------------- /content/en/policies/other/inspect-csr/inspect-csr.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/inspect-csr/inspect-csr.md -------------------------------------------------------------------------------- /content/en/policies/other/kubernetes-version-check/kubernetes-version-check.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/kubernetes-version-check/kubernetes-version-check.md -------------------------------------------------------------------------------- /content/en/policies/other/label-existing-namespaces/label-existing-namespaces.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/label-existing-namespaces/label-existing-namespaces.md -------------------------------------------------------------------------------- /content/en/policies/other/label-nodes-cri/label-nodes-cri.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/label-nodes-cri/label-nodes-cri.md -------------------------------------------------------------------------------- /content/en/policies/other/limit-configmap-for-sa/limit-configmap-for-sa.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/limit-configmap-for-sa/limit-configmap-for-sa.md -------------------------------------------------------------------------------- /content/en/policies/other/limit-containers-per-pod/limit-containers-per-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/limit-containers-per-pod/limit-containers-per-pod.md -------------------------------------------------------------------------------- /content/en/policies/other/limit-hostpath-type-pv/limit-hostpath-type-pv.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/limit-hostpath-type-pv/limit-hostpath-type-pv.md -------------------------------------------------------------------------------- /content/en/policies/other/limit-hostpath-vols/limit-hostpath-vols.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/limit-hostpath-vols/limit-hostpath-vols.md -------------------------------------------------------------------------------- /content/en/policies/other/memory-requests-equal-limits/memory-requests-equal-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/memory-requests-equal-limits/memory-requests-equal-limits.md -------------------------------------------------------------------------------- /content/en/policies/other/metadata-match-regex/metadata-match-regex.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/metadata-match-regex/metadata-match-regex.md -------------------------------------------------------------------------------- /content/en/policies/other/mitigate-log4shell/mitigate-log4shell.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/mitigate-log4shell/mitigate-log4shell.md -------------------------------------------------------------------------------- /content/en/policies/other/mutate-large-termination-gps/mutate-large-termination-gps.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/mutate-large-termination-gps/mutate-large-termination-gps.md -------------------------------------------------------------------------------- /content/en/policies/other/mutate-pod-binding/mutate-pod-binding.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/mutate-pod-binding/mutate-pod-binding.md -------------------------------------------------------------------------------- /content/en/policies/other/namespace-inventory-check/namespace-inventory-check.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/namespace-inventory-check/namespace-inventory-check.md -------------------------------------------------------------------------------- /content/en/policies/other/namespace-protection/namespace-protection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/namespace-protection/namespace-protection.md -------------------------------------------------------------------------------- /content/en/policies/other/pdb-maxunavailable/pdb-maxunavailable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/pdb-maxunavailable/pdb-maxunavailable.md -------------------------------------------------------------------------------- /content/en/policies/other/pdb-minavailable/pdb-minavailable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/pdb-minavailable/pdb-minavailable.md -------------------------------------------------------------------------------- /content/en/policies/other/policy-for-exceptions/policy-for-exceptions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/policy-for-exceptions/policy-for-exceptions.md -------------------------------------------------------------------------------- /content/en/policies/other/prepend-image-registry/prepend-image-registry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/prepend-image-registry/prepend-image-registry.md -------------------------------------------------------------------------------- /content/en/policies/other/prevent-bare-pods/prevent-bare-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/prevent-bare-pods/prevent-bare-pods.md -------------------------------------------------------------------------------- /content/en/policies/other/prevent-cr8escape/prevent-cr8escape.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/prevent-cr8escape/prevent-cr8escape.md -------------------------------------------------------------------------------- /content/en/policies/other/prevent-duplicate-hpa/prevent-duplicate-hpa.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/prevent-duplicate-hpa/prevent-duplicate-hpa.md -------------------------------------------------------------------------------- /content/en/policies/other/prevent-duplicate-vpa/prevent-duplicate-vpa.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/prevent-duplicate-vpa/prevent-duplicate-vpa.md -------------------------------------------------------------------------------- /content/en/policies/other/protect-node-taints/protect-node-taints.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/protect-node-taints/protect-node-taints.md -------------------------------------------------------------------------------- /content/en/policies/other/record-creation-details/record-creation-details.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/record-creation-details/record-creation-details.md -------------------------------------------------------------------------------- /content/en/policies/other/refresh-env-var-in-pod/refresh-env-var-in-pod.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/refresh-env-var-in-pod/refresh-env-var-in-pod.md -------------------------------------------------------------------------------- /content/en/policies/other/refresh-volumes-in-pods/refresh-volumes-in-pods.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/refresh-volumes-in-pods/refresh-volumes-in-pods.md -------------------------------------------------------------------------------- /content/en/policies/other/remove-hostpath-volumes/remove-hostpath-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/remove-hostpath-volumes/remove-hostpath-volumes.md -------------------------------------------------------------------------------- /content/en/policies/other/remove-serviceaccount-token/remove-serviceaccount-token.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/remove-serviceaccount-token/remove-serviceaccount-token.md -------------------------------------------------------------------------------- /content/en/policies/other/replace-image-registry/replace-image-registry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/replace-image-registry/replace-image-registry.md -------------------------------------------------------------------------------- /content/en/policies/other/replace-ingress-hosts/replace-ingress-hosts.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/replace-ingress-hosts/replace-ingress-hosts.md -------------------------------------------------------------------------------- /content/en/policies/other/require-annotations/require-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-annotations/require-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other/require-base-image/require-base-image.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-base-image/require-base-image.md -------------------------------------------------------------------------------- /content/en/policies/other/require-container-port-names/require-container-port-names.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-container-port-names/require-container-port-names.md -------------------------------------------------------------------------------- /content/en/policies/other/require-cpu-limits/require-cpu-limits.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-cpu-limits/require-cpu-limits.md -------------------------------------------------------------------------------- /content/en/policies/other/require-image-checksum/require-image-checksum.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-image-checksum/require-image-checksum.md -------------------------------------------------------------------------------- /content/en/policies/other/require-image-source/require-image-source.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-image-source/require-image-source.md -------------------------------------------------------------------------------- /content/en/policies/other/require-imagepullsecrets/require-imagepullsecrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-imagepullsecrets/require-imagepullsecrets.md -------------------------------------------------------------------------------- /content/en/policies/other/require-ingress-https/require-ingress-https.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-ingress-https/require-ingress-https.md -------------------------------------------------------------------------------- /content/en/policies/other/require-netpol/require-netpol.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-netpol/require-netpol.md -------------------------------------------------------------------------------- /content/en/policies/other/require-non-root-groups/require-non-root-groups.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-non-root-groups/require-non-root-groups.md -------------------------------------------------------------------------------- /content/en/policies/other/require-pdb/require-pdb.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-pdb/require-pdb.md -------------------------------------------------------------------------------- /content/en/policies/other/require-pod-priorityclassname/require-pod-priorityclassname.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-pod-priorityclassname/require-pod-priorityclassname.md -------------------------------------------------------------------------------- /content/en/policies/other/require-qos-burstable/require-qos-burstable.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-qos-burstable/require-qos-burstable.md -------------------------------------------------------------------------------- /content/en/policies/other/require-qos-guaranteed/require-qos-guaranteed.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-qos-guaranteed/require-qos-guaranteed.md -------------------------------------------------------------------------------- /content/en/policies/other/require-reasonable-pdbs/require-reasonable-pdbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-reasonable-pdbs/require-reasonable-pdbs.md -------------------------------------------------------------------------------- /content/en/policies/other/require-storageclass/require-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-storageclass/require-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other/require-unique-external-dns/require-unique-external-dns.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-unique-external-dns/require-unique-external-dns.md -------------------------------------------------------------------------------- /content/en/policies/other/require-vulnerability-scan/require-vulnerability-scan.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/require-vulnerability-scan/require-vulnerability-scan.md -------------------------------------------------------------------------------- /content/en/policies/other/resolve-image-to-digest/resolve-image-to-digest.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/resolve-image-to-digest/resolve-image-to-digest.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-annotations/restrict-annotations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-annotations/restrict-annotations.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-automount-sa-token/restrict-automount-sa-token.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-automount-sa-token/restrict-automount-sa-token.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-binding-clusteradmin/restrict-binding-clusteradmin.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-binding-clusteradmin/restrict-binding-clusteradmin.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-clusterrole-csr/restrict-clusterrole-csr.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-clusterrole-csr/restrict-clusterrole-csr.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-deprecated-registry/restrict-deprecated-registry.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-deprecated-registry/restrict-deprecated-registry.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-edit-for-endpoints/restrict-edit-for-endpoints.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-edit-for-endpoints/restrict-edit-for-endpoints.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-ingress-classes/restrict-ingress-classes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-ingress-classes/restrict-ingress-classes.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-ingress-host/restrict-ingress-host.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-ingress-host/restrict-ingress-host.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-ingress-wildcard/restrict-ingress-wildcard.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-ingress-wildcard/restrict-ingress-wildcard.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-jobs/restrict-jobs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-jobs/restrict-jobs.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-loadbalancer/restrict-loadbalancer.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-loadbalancer/restrict-loadbalancer.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-node-affinity/restrict-node-affinity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-node-affinity/restrict-node-affinity.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-node-label-changes/restrict-node-label-changes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-node-label-changes/restrict-node-label-changes.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-node-label-creation/restrict-node-label-creation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-node-label-creation/restrict-node-label-creation.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-node-selection/restrict-node-selection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-node-selection/restrict-node-selection.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-pod-count-per-node/restrict-pod-count-per-node.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-pod-count-per-node/restrict-pod-count-per-node.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-scale/restrict-scale.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-scale/restrict-scale.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-secret-role-verbs/restrict-secret-role-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-secret-role-verbs/restrict-secret-role-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-secrets-by-label/restrict-secrets-by-label.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-secrets-by-label/restrict-secrets-by-label.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-secrets-by-name/restrict-secrets-by-name.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-secrets-by-name/restrict-secrets-by-name.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-service-account/restrict-service-account.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-service-account/restrict-service-account.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-service-port-range/restrict-service-port-range.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-service-port-range/restrict-service-port-range.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-storageclass/restrict-storageclass.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-storageclass/restrict-storageclass.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-usergroup-fsgroup-id/restrict-usergroup-fsgroup-id.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-usergroup-fsgroup-id/restrict-usergroup-fsgroup-id.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-wildcard-resources/restrict-wildcard-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-wildcard-resources/restrict-wildcard-resources.md -------------------------------------------------------------------------------- /content/en/policies/other/restrict-wildcard-verbs/restrict-wildcard-verbs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/restrict-wildcard-verbs/restrict-wildcard-verbs.md -------------------------------------------------------------------------------- /content/en/policies/other/scale-deployment-zero/scale-deployment-zero.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/scale-deployment-zero/scale-deployment-zero.md -------------------------------------------------------------------------------- /content/en/policies/other/spread-pods-across-topology/spread-pods-across-topology.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/spread-pods-across-topology/spread-pods-across-topology.md -------------------------------------------------------------------------------- /content/en/policies/other/sync-secrets/sync-secrets.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/sync-secrets/sync-secrets.md -------------------------------------------------------------------------------- /content/en/policies/other/time-bound-policy/time-bound-policy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/time-bound-policy/time-bound-policy.md -------------------------------------------------------------------------------- /content/en/policies/other/unique-ingress-host-and-path/unique-ingress-host-and-path.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/unique-ingress-host-and-path/unique-ingress-host-and-path.md -------------------------------------------------------------------------------- /content/en/policies/other/unique-ingress-paths/unique-ingress-paths.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/unique-ingress-paths/unique-ingress-paths.md -------------------------------------------------------------------------------- /content/en/policies/other/update-image-tag/update-image-tag.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/update-image-tag/update-image-tag.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image-cve-2022-42889/verify-image-cve-2022-42889.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image-cve-2022-42889/verify-image-cve-2022-42889.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image-gcpkms/verify-image-gcpkms.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image-gcpkms/verify-image-gcpkms.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image-ivpol/verify-image-ivpol.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image-ivpol/verify-image-ivpol.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image-slsa/verify-image-slsa.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image-slsa/verify-image-slsa.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image-with-multi-keys/verify-image-with-multi-keys.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image-with-multi-keys/verify-image-with-multi-keys.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-image/verify-image.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-image/verify-image.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-manifest-integrity/verify-manifest-integrity.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-manifest-integrity/verify-manifest-integrity.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-sbom-cyclonedx/verify-sbom-cyclonedx.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-sbom-cyclonedx/verify-sbom-cyclonedx.md -------------------------------------------------------------------------------- /content/en/policies/other/verify-vpa-target/verify-vpa-target.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/other/verify-vpa-target/verify-vpa-target.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/disallow-host-path/disallow-host-path.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/disallow-host-path/disallow-host-path.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/disallow-host-ports/disallow-host-ports.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/disallow-host-ports/disallow-host-ports.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/disallow-proc-mount/disallow-proc-mount.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/disallow-proc-mount/disallow-proc-mount.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/disallow-selinux/disallow-selinux.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/disallow-selinux/disallow-selinux.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/restrict-seccomp/restrict-seccomp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/restrict-seccomp/restrict-seccomp.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-cel/baseline/restrict-sysctls/restrict-sysctls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-cel/baseline/restrict-sysctls/restrict-sysctls.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-vpol/baseline/disallow-host-path/disallow-host-path.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-vpol/baseline/disallow-host-path/disallow-host-path.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-vpol/baseline/disallow-selinux/disallow-selinux.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-vpol/baseline/disallow-selinux/disallow-selinux.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-vpol/baseline/restrict-seccomp/restrict-seccomp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-vpol/baseline/restrict-seccomp/restrict-seccomp.md -------------------------------------------------------------------------------- /content/en/policies/pod-security-vpol/baseline/restrict-sysctls/restrict-sysctls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security-vpol/baseline/restrict-sysctls/restrict-sysctls.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-capabilities/disallow-capabilities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-capabilities/disallow-capabilities.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-host-path/disallow-host-path.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-host-path/disallow-host-path.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-host-ports/disallow-host-ports.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-host-ports/disallow-host-ports.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-host-process/disallow-host-process.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-host-process/disallow-host-process.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-proc-mount/disallow-proc-mount.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-proc-mount/disallow-proc-mount.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/disallow-selinux/disallow-selinux.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/disallow-selinux/disallow-selinux.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/restrict-seccomp/restrict-seccomp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/restrict-seccomp/restrict-seccomp.md -------------------------------------------------------------------------------- /content/en/policies/pod-security/baseline/restrict-sysctls/restrict-sysctls.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/pod-security/baseline/restrict-sysctls/restrict-sysctls.md -------------------------------------------------------------------------------- /content/en/policies/psa-cel/add-psa-namespace-reporting/add-psa-namespace-reporting.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa-cel/add-psa-namespace-reporting/add-psa-namespace-reporting.md -------------------------------------------------------------------------------- /content/en/policies/psa-cel/deny-privileged-profile/deny-privileged-profile.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa-cel/deny-privileged-profile/deny-privileged-profile.md -------------------------------------------------------------------------------- /content/en/policies/psa-mpol/add-psa-labels/add-psa-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa-mpol/add-psa-labels/add-psa-labels.md -------------------------------------------------------------------------------- /content/en/policies/psa/add-psa-labels/add-psa-labels.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa/add-psa-labels/add-psa-labels.md -------------------------------------------------------------------------------- /content/en/policies/psa/add-psa-namespace-reporting/add-psa-namespace-reporting.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa/add-psa-namespace-reporting/add-psa-namespace-reporting.md -------------------------------------------------------------------------------- /content/en/policies/psa/deny-privileged-profile/deny-privileged-profile.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psa/deny-privileged-profile/deny-privileged-profile.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration-mpol/add-apparmor/add-apparmor.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration-mpol/add-apparmor/add-apparmor.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration-mpol/add-capabilities/add-capabilities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration-mpol/add-capabilities/add-capabilities.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration-mpol/add-runtimeClassName/add-runtimeClassName.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration-mpol/add-runtimeClassName/add-runtimeClassName.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration/add-apparmor/add-apparmor.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration/add-apparmor/add-apparmor.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration/add-capabilities/add-capabilities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration/add-capabilities/add-capabilities.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration/add-runtimeClassName/add-runtimeClassName.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration/add-runtimeClassName/add-runtimeClassName.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration/check-supplemental-groups/check-supplemental-groups.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration/check-supplemental-groups/check-supplemental-groups.md -------------------------------------------------------------------------------- /content/en/policies/psp-migration/restrict-runtimeClassName/restrict-runtimeClassName.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/psp-migration/restrict-runtimeClassName/restrict-runtimeClassName.md -------------------------------------------------------------------------------- /content/en/policies/tekton-cel/block-tekton-task-runs/block-tekton-task-runs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/tekton-cel/block-tekton-task-runs/block-tekton-task-runs.md -------------------------------------------------------------------------------- /content/en/policies/tekton-cel/require-tekton-bundle/require-tekton-bundle.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/tekton-cel/require-tekton-bundle/require-tekton-bundle.md -------------------------------------------------------------------------------- /content/en/policies/tekton/block-tekton-task-runs/block-tekton-task-runs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/tekton/block-tekton-task-runs/block-tekton-task-runs.md -------------------------------------------------------------------------------- /content/en/policies/tekton/require-tekton-bundle/require-tekton-bundle.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/tekton/require-tekton-bundle/require-tekton-bundle.md -------------------------------------------------------------------------------- /content/en/policies/traefik/disallow-default-tlsoptions/disallow-default-tlsoptions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/traefik/disallow-default-tlsoptions/disallow-default-tlsoptions.md -------------------------------------------------------------------------------- /content/en/policies/velero-cel/block-velero-restore/block-velero-restore.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero-cel/block-velero-restore/block-velero-restore.md -------------------------------------------------------------------------------- /content/en/policies/velero-cel/validate-cron-schedule/validate-cron-schedule.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero-cel/validate-cron-schedule/validate-cron-schedule.md -------------------------------------------------------------------------------- /content/en/policies/velero-mpol/backup-all-volumes/backup-all-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero-mpol/backup-all-volumes/backup-all-volumes.md -------------------------------------------------------------------------------- /content/en/policies/velero/backup-all-volumes/backup-all-volumes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero/backup-all-volumes/backup-all-volumes.md -------------------------------------------------------------------------------- /content/en/policies/velero/block-velero-restore/block-velero-restore.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero/block-velero-restore/block-velero-restore.md -------------------------------------------------------------------------------- /content/en/policies/velero/validate-cron-schedule/validate-cron-schedule.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/policies/velero/validate-cron-schedule/validate-cron-schedule.md -------------------------------------------------------------------------------- /content/en/search.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/search.md -------------------------------------------------------------------------------- /content/en/support/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/_index.md -------------------------------------------------------------------------------- /content/en/support/blakyaks/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/blakyaks/_index.md -------------------------------------------------------------------------------- /content/en/support/giantswarm/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/giantswarm/_index.md -------------------------------------------------------------------------------- /content/en/support/infracloud/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/infracloud/_index.md -------------------------------------------------------------------------------- /content/en/support/kodekloud/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/kodekloud/_index.md -------------------------------------------------------------------------------- /content/en/support/nirmata/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/content/en/support/nirmata/_index.md -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/go.sum -------------------------------------------------------------------------------- /hugo.work: -------------------------------------------------------------------------------- 1 | go 1.19 2 | 3 | use ../docsy/ -------------------------------------------------------------------------------- /hugo.work.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/hugo.work.sum -------------------------------------------------------------------------------- /i18n/en.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/i18n/en.toml -------------------------------------------------------------------------------- /layouts/404.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/404.html -------------------------------------------------------------------------------- /layouts/_default/_markup/render-heading.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/_default/_markup/render-heading.html -------------------------------------------------------------------------------- /layouts/_default/_markup/render-image.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/_default/_markup/render-image.html -------------------------------------------------------------------------------- /layouts/_default/_markup/render-link.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/_default/_markup/render-link.html -------------------------------------------------------------------------------- /layouts/index.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/index.json -------------------------------------------------------------------------------- /layouts/partials/back-button.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/back-button.html -------------------------------------------------------------------------------- /layouts/partials/breadcrumb.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/breadcrumb.html -------------------------------------------------------------------------------- /layouts/partials/footer.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/footer.html -------------------------------------------------------------------------------- /layouts/partials/functions/getCodeConfig.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/functions/getCodeConfig.html -------------------------------------------------------------------------------- /layouts/partials/hooks/body-end.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/hooks/body-end.html -------------------------------------------------------------------------------- /layouts/partials/hooks/head-end.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/hooks/head-end.html -------------------------------------------------------------------------------- /layouts/partials/icon-sprites.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/icon-sprites.html -------------------------------------------------------------------------------- /layouts/partials/navbar-version-selector.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/navbar-version-selector.html -------------------------------------------------------------------------------- /layouts/partials/navbar.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/navbar.html -------------------------------------------------------------------------------- /layouts/partials/page-meta-links.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/page-meta-links.html -------------------------------------------------------------------------------- /layouts/partials/policies/sidebar.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/policies/sidebar.html -------------------------------------------------------------------------------- /layouts/partials/policies/toggle.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/policies/toggle.html -------------------------------------------------------------------------------- /layouts/partials/scripts/mermaid.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/scripts/mermaid.html -------------------------------------------------------------------------------- /layouts/partials/sidebar-tree.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/partials/sidebar-tree.html -------------------------------------------------------------------------------- /layouts/policies/list.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/policies/list.html -------------------------------------------------------------------------------- /layouts/policies/single.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/policies/single.html -------------------------------------------------------------------------------- /layouts/shortcodes/feature-state.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/shortcodes/feature-state.html -------------------------------------------------------------------------------- /layouts/shortcodes/videos.html: -------------------------------------------------------------------------------- 1 |
2 | {{ .Inner }} 3 |
4 | -------------------------------------------------------------------------------- /layouts/shortcodes/youtube.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/layouts/shortcodes/youtube.html -------------------------------------------------------------------------------- /netlify.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/netlify.toml -------------------------------------------------------------------------------- /render/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/README.md -------------------------------------------------------------------------------- /render/git.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/git.go -------------------------------------------------------------------------------- /render/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/go.mod -------------------------------------------------------------------------------- /render/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/go.sum -------------------------------------------------------------------------------- /render/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/main.go -------------------------------------------------------------------------------- /render/render.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/render.go -------------------------------------------------------------------------------- /render/root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/root.go -------------------------------------------------------------------------------- /render/template.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/render/template.go -------------------------------------------------------------------------------- /scripts/hash-files.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/scripts/hash-files.sh -------------------------------------------------------------------------------- /static/favicons/_head.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/_head.html -------------------------------------------------------------------------------- /static/favicons/apple-touch-icon-180x180.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/apple-touch-icon-180x180.png -------------------------------------------------------------------------------- /static/favicons/browserconfig.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/browserconfig.xml -------------------------------------------------------------------------------- /static/favicons/favicon-16x16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/favicon-16x16.png -------------------------------------------------------------------------------- /static/favicons/favicon-32x32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/favicon-32x32.png -------------------------------------------------------------------------------- /static/favicons/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/favicon.ico -------------------------------------------------------------------------------- /static/favicons/pwa-192x192.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/pwa-192x192.png -------------------------------------------------------------------------------- /static/favicons/pwa-512x512.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/pwa-512x512.png -------------------------------------------------------------------------------- /static/favicons/tile150x150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/tile150x150.png -------------------------------------------------------------------------------- /static/favicons/tile310x150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/tile310x150.png -------------------------------------------------------------------------------- /static/favicons/tile310x310.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/tile310x310.png -------------------------------------------------------------------------------- /static/favicons/tile70x70.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/favicons/tile70x70.png -------------------------------------------------------------------------------- /static/icons/carly.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/icons/carly.svg -------------------------------------------------------------------------------- /static/icons/copy.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/icons/copy.svg -------------------------------------------------------------------------------- /static/icons/expand.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/icons/expand.svg -------------------------------------------------------------------------------- /static/icons/order.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/icons/order.svg -------------------------------------------------------------------------------- /static/images/Kyverno-Policy-Structure.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/Kyverno-Policy-Structure.png -------------------------------------------------------------------------------- /static/images/kubernetes-admission-controllers.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/kubernetes-admission-controllers.png -------------------------------------------------------------------------------- /static/images/kyverno-architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/kyverno-architecture.png -------------------------------------------------------------------------------- /static/images/kyverno-installation.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/kyverno-installation.png -------------------------------------------------------------------------------- /static/images/kyverno_website_graphics.pptx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/kyverno_website_graphics.pptx -------------------------------------------------------------------------------- /static/images/logo_cloudnative.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/logo_cloudnative.png -------------------------------------------------------------------------------- /static/images/nirmata-wt.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/nirmata-wt.png -------------------------------------------------------------------------------- /static/images/nirmata.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/nirmata.png -------------------------------------------------------------------------------- /static/images/verify-image-rule.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/images/verify-image-rule.png -------------------------------------------------------------------------------- /static/logos/adidas.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/adidas.png -------------------------------------------------------------------------------- /static/logos/bloomberg.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/bloomberg.png -------------------------------------------------------------------------------- /static/logos/deutsche-telekom.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/deutsche-telekom.png -------------------------------------------------------------------------------- /static/logos/linkedin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/linkedin.png -------------------------------------------------------------------------------- /static/logos/razorpay.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/razorpay.png -------------------------------------------------------------------------------- /static/logos/robinhood.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/robinhood.png -------------------------------------------------------------------------------- /static/logos/spotify.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/spotify.png -------------------------------------------------------------------------------- /static/logos/us-dod.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/us-dod.png -------------------------------------------------------------------------------- /static/logos/vodafone.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/vodafone.png -------------------------------------------------------------------------------- /static/logos/wayfair.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/wayfair.png -------------------------------------------------------------------------------- /static/logos/yahoo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kyverno/website/HEAD/static/logos/yahoo.png --------------------------------------------------------------------------------