José Guilherme Vanz

Manage admission policies in your Kubernetes cluster with ease.

📰 Brazilian government gazettes, accessible to everyone.

Container Cluster Manager from Google

An experimental Rust crate for sigstore

Pelican theme based on Hyde Jekyll theme

C++ library to parse WARC files

No description.

No description.

Files used to run Kubewarden end-to-end tests

Helm charts for the Kubewarden project

Kubewarden's documentation

Autogenerate Markdown documentation for clap command-line tools

Kubewarden policies

libpod is a library used to create container pods. Home of Podman.

A tool that facilitates building OCI images

Work with remote images registries - retrieving information, images, signing content

AstroNvim template

Kubewarden's RFCs

CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices

The slsactl is a Command Line Interface (CLI) tool to provide a consolidated experience while handling supply chain aspects of projects across the Rancher ecosystem.

Kubewarden website

Example of Rancher Fleet bundle for Kubewarden

A SBOM-centric security scanner.

Kubewarden Policy SDK for the Go programming language

Kubewarden Policy SDK for the Rust programming language

Kubewarden's community repository

Automation scripts for the management of the Kubewarden organization on GitHub

Go-to CLI tool for Kubewarden users.

Updatecli Policies

No description.

A policy that can run CEL expressions

Specification of sigstore's architecture in an IETF internet-draft format

A Kubewarden policy to check liveness and readiness probes

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

No description.

News scrapper and AI based analyzer (based on original work by iliane5/meridian)

No description.

Reports evaluation of existing Kubernetes resources with your already deployed Kubewarden policies.

A Kubewarden Policy written in AssemblyScript that limits the ability to create privileged containers

Plain text project planning in Obsidian

Crate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.

A test context-aware policy

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

No description.

Experimental Kubewarden SDK for TypeScript and JavaScript

Upgrade responder for Longhorn

async fn(Request) -> Result<Response, Error>

Replacement for the Kubernetes Pod Security Policy that controls the usage of volumes

No description.

No description.

No description.

A collection of Rego policies that can be used to enforce best practices in Kubernetes clusters

Policy that validates and adjusts the usage of StorageClasses in PersistentVolumeClaims

No description.

No description.

Kubewarden policy that validates Kubernetes' resource labels

No description.

A template repository to quickly port a Open Policy Agent policy to Kubewarden

A template repository to quickly port a Gatekeeper policy to Kubewarden

No description.

No description.

A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables

HTTP load to stress policy-server

A Declarative Dependency Management tool

A template repository to quickly scaffold a Kubewarden policy written with Swift language

No description.

Experiment for Kubewarden booth at Kubecon EU 2024

A Kubewarden rust policy template to be used with cargo-generate

Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.

Validates Pod's priority class

Kubewarden's User Interface

No description.

Policy is designed to enforce constraints on the resource requirements of Kubernetes containers

Repo for the controller-runtime subproject of kubebuilder (sig-apimachinery)

Special GitHub repository

waPC Rust monorepo

The Rust OpenTelemetry implementation

No description.

Tensors and Dynamic neural networks in Python with strong GPU acceleration

A test context-aware policy written using Go Wasi

No description.

No description.

No description.

golang text/template for rust

Workflow to rebuild and sign rancher/kubectl image

Create book from markdown files. Like Gitbook but implemented in Rust

No description.

Getting started with Rust and building out a Wasm for Kubewarden

Policy validates that there are no services with the same set of selectors

Policy validates pods sharing processes PID namespace

Multi Cluster Observability with AIOps

⚖️Technical Oversight Committee (TOC)

No description.

A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

A demo policy showing how to access Kubernetes resources at policy evaluation time

A test policy that simulates long running policy evaluations

Prevent the creation of Namespace under a Rancher Project that doesn't have any resource quota left

A Kubewarden Policy that echoes Kubernetes' AdmissionReview objects

Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

Replacement for the Kubernetes Pod Security Policy that controls the usage of hostpaths

Propagate Rancher Project labels to the Namespaces it owns

Rancher UI Extension Charts

Kubewarden policy designed to automatically propagate labels defined in a Kubernetes namespace to the associated resources within that namespace

No description.

Kubewarden policy that ensures that namespaces have the required PSA labels

A Kubewarden Policy that controls the usage of Pod runtimeClass

No description.

A Kubewarden policy to disallow usage of the default namespace

A policy that prevents the creation of Service resources with type NodePort

A policy that prevents the creation of Service resources with type LoadBalancer

Kubernetes Rust Kubelet

A Kubewarden policy that controls usage of sysctls

A Kubewarden Policy that controls the usage of `volumeMounts`

No description.

Software Supply Chain Transparency Log

Sigstore OIDC PKI

Wrapper for Querido Diário API

Common go library shared across sigstore services and clients

👩🏿‍🎓👨🏽‍🎓👩🏻‍🎓CNCF Mentoring + CommunityBridge + Summer of Code

No description.

Experimental: Kubernetes Go types that can be used with TinyGo

Utils scripts used by the Kubewarden team and users.

A GitHub Action to turn a GitHub project into a self-hosted Helm chart repo, using helm/chart-releaser CLI tool

Hosting Helm Charts via GitHub Pages and Releases

A multi-page Hugo theme with fullscreen hero images and fullwidth sections.

A Kubewarden Policy that controls the usage of environment variables

No description.

No description.

Code for "Controllable Unsupervised Text Attribute Transfer via Editing Entangled Latent Representation" (NeurIPS 2019)

Kubewarden policy that validates Kubernetes' resource annotations

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

No description.

A stripped down version of go-openapi/strfrm that works with TinyGo

A place where to find and discover policies

🤗 The largest hub of ready-to-use datasets for ML models with fast, easy-to-use and efficient data manipulation tools

Container Signing

No description.

A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to

Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers

A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

A Pod Security Policy that controls Container Capabilities

Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces

A Kubewarden policy that enforces root filesystem to be readonly

GitHub actions used by the Kubewarden project

A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types

Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux

A tool to run the unit tests of Kubewarden policies written using Swift

A Rust tortilla wrapped around a Rego Wasm filling

repo manifest tool for the kubewarden project

Kubewarden Policy SDK for the Swift programming language

A GitHub Action that sends notifications about new/updated policies to Kubewarden's policy-hub

Get JSON values quickly - JSON parser for Go

Policy to enforce requirements on Kubernetes Ingress resources.

Github action used to setup a K3D cluster and install Kubewarden stack on it

Recreation of common Pod Security Policy configuration in other common Kubernetes policy engines

No description.

AIND Term 2 -- VUI Capstone Project

No description.

No description.

No description.

No description.

No description.

A template repository to quickly scaffold a Kubewarden policy written with Go language

Materiais e exercicios gerados durante a diciplina ICC372-2020-02 Avaliação de desempenho do programa de mestrado da UFAM

An OCI container runtime monitor.

Location for shared common files in github.com/containers repos.

Pacemaker is an advanced, scalable High-Availability cluster resource manager

Hidden Markov Model Part of Speech tagger project

No description.

Coding exercises for the Natural Language Processing concentration, part of Udacity's AIND program.

World's smallest storage controller

Cloud-Native distributed block storage built on and for Kubernetes

The Linux Programming Interface examples

Glommio is a thread-per-core framework that aims to make the task of writing highly parallel asynchronous application in a thread-per-core architecture easier for rustaceans

No description.

SUSE Linux Enterprise support utilities. Gathers system information.

Source code for Uyuni

docker cp clone

Have fun with The Linux Programming Interface

Querido diário deploy scripts

Ansible playbooks

Blog

NGINX Ingress Controller for Kubernetes

No description.

Docker - the open-source application container engine

Project to enable search of key words in text files extracted by the Querido Diário.

CLI tool used to simplify (or orchestrate) kubeadm-based Kubernetes cluster deployment and update

The final project for the Udacity C++ Nanodegree Concurrency course

SUSE Container as a Service Platform Documentation

No description.

No description.

Dummy Kubernetes operator

Work with containers' images

No description.

Student repository for the CppND OOP course project

Este repositório contém o site da comunidade PythonBlumenau. Sinta-se livre para forkar e colaborar \o/

Splits supportconfig log files

No description.