The safeguards map / 3.7 Admission and owner settings
Kubewarden
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A Kubernetes admission controller that evaluates policies packaged as WebAssembly modules, written in languages including Rego, CEL, Rust and Go.
Where it sits
3.7 Admission and owner settings (primary): Runs as a Kubernetes dynamic admission controller that evaluates WebAssembly policies against each request, and scans existing cluster resources against the registered policies.
The runtime component that evaluates admission policies written in WebAssembly
captured
Its policies can be written in CEL, Rego (OPA & Gatekeeper flavours), Rust, Go, YAML, and others.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
Handoffs
consumes Policy: WebAssembly policies (Rego, CEL, Rust, Go)
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.