This repository contains a collection of ValidatingAdmissionPolicies for Kubernetes >= 1.30.
These policies are based on kyverno/policies and were adjusted to work in environments that do not have a running Kyverno installation.
All policies are managed with kustomize and can be installed by referencing overlays and/or components. Check the releases page for available versions.
The following overlays are available in this repository. Feel free to enable as many of them as you like!
all
: Contains all policies in this repositorypod-security-standards-baseline
: Contains policies for the PSSbaseline
pod-security-standards-restricted
: Contains policies for the PSSrestricted