CINXE.COM

<!doctype html><html lang=en-us><head><meta name=generator content="Hugo 0.82.0"><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta http-equiv=x-ua-compatible content="IE=edge"><title>Kubewarden: Kubernetes Dynamic Admission at your fingertips</title><link rel=icon type=image/svg href=/favicon.svg><link rel=mask-icon href=/favicon.svg><link rel=stylesheet type=text/css href=/sass/main.min.css?1744028668><link rel=alternate type=application/rss+xml href=/index.xml title=Kubewarden><script async defer src=https://buttons.github.io/buttons.js></script><script type=text/javascript src=//cdn.bizible.com/scripts/bizible.js async></script></head><body><section id=survey-banner class=survey-container><a class=survey-content href=https://docs.google.com/forms/d/e/1FAIpQLSd1TLjRzH1LNO1RXJA_Kgi6uHFoJhq9sM5OgOqyIldodgeSNg/viewform target=_blank>❄️ Click here to fill out our survey ❄️</a></section><header><div class=sub-header><a href><img src=/images/logo-kubewarden.svg alt=Kubewarden></a> <a href=#main-menu id=main-menu-toggle class=menu-toggle aria-label="Open main menu"><span aria-hidden=true></span><span aria-hidden=true></span><span aria-hidden=true></span></a><nav id=main-menu class=main-menu aria-label="Main menu"><a href=#main-menu-toggle id=main-menu-close class=menu-close aria-label="Close main menu"><span class=sr-only>Close main menu</span> <span class="fa fa-close" aria-hidden=true></span></a><h2 id=main-menu-heading class=sr-only>Main menu</h2><ul class=menu><li><a href="https://artifacthub.io/packages/search?kind=13&sort=relevance&page=1" target=_blank class="btn no-bg">Policies</a></li><li><a href=https://charts.kubewarden.io/ target=_blank class="btn no-bg">Helm Charts</a></li><li><a href=https://docs.kubewarden.io/ target=_blank class="btn no-bg">Docs</a></li><li><a href="https://kubernetes.slack.com/?redir=%2Fmessages%2Fkubewarden" target=_blank class="btn no-bg">Slack</a></li><li><a href=https://bsky.app/profile/kubewarden.io target=_blank class="btn no-bg">Bluesky</a></li><li><a href=https://hachyderm.io/@kubewarden rel=me target=_blank class="btn no-bg">Mastodon</a></li><li><a href=/#get-in-touch target=_blank class="btn no-bg">Community</a></li><li><a href=/blog target=_blank class="btn no-bg">Blog</a></li><li><a href=https://docs.kubewarden.io/enterprise target=_blank class="btn no-bg">Enterprise</a></li><li><a href=https://github.com/kubewarden class="btn github"><img src=/images/icon-github.svg><span>Github</span></a></li></ul></nav><a href=#main-menu-toggle class=backdrop tabindex=-1 aria-hidden=true hidden></a></div></header><main><div><section class=intro><div class=bg-primary><div class="wrap grid-one"><div><h1 style=color:#fff>Kubewarden</h1><h3 style=color:#fff>A <em>universal</em> policy engine for Kubernetes</h3><h3 style=color:#fff>Kubernetes Dynamic Admission at your fingertips</h3><h4 style=color:#fff>Flexible, secure and portable, thanks to WebAssembly. Get started with the latest version—<a href=#get-started>1.23</a></h4></div></div></div><div class=folder><h4 style=color:#fff>Great for</h4><div class="bg-light grid-dynamic text-center"><h5>Familiar policy development</h5><h5>Easy policy distribution</h5><h5>Build & push once, run everywhere</h5><h5>Community maintained policies</h5></div></div></section><section class=wrap><h2>What is Kubewarden?</h2><p class="text-center font-weight-light">Kubewarden is a universal policy engine for Kubernetes. Its mission is simplifying the adoption of <strong>policy-as-code</strong>.</p><div class=grid-two><div><h4>As a Policy author</h4><p class="text-left font-weight-light">Kubewarden doesn't require you to learn a new Domain Specific Language or a query language.</p><p class="text-left font-weight-light">Write policies in your favorite programming language. Reuse skills and be quickly productive.</p><p class="text-left font-weight-light">Develop policies in <a href=https://rust-lang.org target=_blank>Rust</a>, <a href=https://go.dev target=_blank>Go</a>, <a href=https://cel.dev target=_blank>CEL</a>, and <a href=https://www.openpolicyagent.org/docs/latest/policy-language/ target=_blank>Rego</a>, and others.</div><div><h4>As a Kubernetes Operator</h4><p class="text-left font-weight-light">Kubewarden policies can be distributed using container registries. Keep using your existing infrastructure and processes.</p><p class="text-left font-weight-light">It's easy to experiment with policies and to integrate them into CI/CD pipelines.</p></div></div></section><hr><section class=wrap><h2>Why Use Kubewarden</h2><div class=grid-two><div><h5>Freedom of choice</h5><p>Write policies using your favorite programming language, as long as it can be compiled into WebAssembly. Kubewarden is <a href=https://contribute.cncf.io/maintainers/community/vendor-neutrality/ target=_blank>vendor neutral</a>.</p></div><div><h5>Feel at home</h5><p>Policies are regular programs. Use the tools you love, reuse your skills, libraries and best practices.</p></div><div><h5>Portable</h5><p>Policies are portable. Once built, they can run everywhere, regardless of the architecture and Operating System.</p></div><div><h5>Adaptable</h5><p>Kubewarden can also be used to validate non-Kubernetes admission requests. Its "raw" policies can be used to validate any kind of JSON document.</p></div></div></div></section><hr><section class=wrap><h2>How it Works</h2><p class="text-left font-weight-light">Kubewarden integrates with Kubernetes by providing a set of Custom Resources. These Custom Resources simplify the process of enforcing policies on your cluster.</p><p class="text-left font-weight-light">Policies are implemented as WebAssembly modules and are distributed using regular container registries. They are evaluated in a Kubewarden component called <em>"Policy Server".</em></p></p><p class="text-left font-weight-light">Kubewarden Policy Server is a Kubernetes Admission Webhook. Each policy is exposed using a dedicated endpoint. Policies are isolated from the host and from each other. Policies are confined inside a dedicated, secure sandbox.</p></section><hr><section class=get-started><div class=white><h2 class=text-center id=get-started>Get Started</h2><pre> <code> helm repo add kubewarden https://charts.kubewarden.io helm install --create-namespace -n kubewarden kubewarden-crds kubewarden/kubewarden-crds helm install --wait -n kubewarden kubewarden-controller kubewarden/kubewarden-controller helm install --wait -n kubewarden kubewarden-defaults kubewarden/kubewarden-defaults # ... and continue reading <a href=https://docs.kubewarden.io/quick-start style=color:#fff>the quick start</a> documentation </code> </pre></div></section><section class=wrap><h2 id=get-in-touch>Get in Touch</h2><p class="text-left font-weight-light">We hold monthly community meetings that are open to everybody. Subscribe to <a href=https://ics.teamup.com/feed/ks2bj74dvw132mhjtj/11992689.ics>this calendar feed</a> to not miss them, or view all of the events <a href=https://teamup.com/ks2bj74dvw132mhjtj>here</a>.</p><p class="text-left font-weight-light">You can also reach out to us on our <a href="https://kubernetes.slack.com/?redir=%2Fmessages%2Fkubewarden">Slack channel</a> in the Kubernetes Slack workspace, or start a conversation on our <a href=https://github.com/kubewarden/community/discussions>GitHub Discussions</a> page.</p><h3>Upcoming events</h3><iframe src="https://teamup.com/ks2bj74dvw132mhjtj?view=a&tz=UTC&showLogo=0&showSearch=0&showProfileAndInfo=0&showSidepanel=1&disableSidepanel=1&showTitle=0&showViewSelector=0&showMenu=0&showAgendaHeader=0&showAgendaDetails=0&showYearViewHeader=0" style="width:100%;height:400px;border:1px solid #ccc" loading=lazy frameborder=0></iframe></section><section class="bg-light text-center cncf"><div class=grid-two><div><p>Originally developed by</p><a href=https://www.rancher.com/><img src=../images/rancher-suse-logo-horizontal-color.png class=rancher-logo></a></div><div><p>Kubewarden is a CNCF Sandbox Project</p><a href=https://www.cncf.io/><img class=cncf-logo src=../images/cncf-color.png></a></div></div></section></div></main><footer><p>© 2025 Kubewarden Project Authors. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page: <a href=https://www.linuxfoundation.org/trademark-usage>https://www.linuxfoundation.org/trademark-usage</a></p></footer><script async src="https://www.googletagmanager.com/gtag/js?id=G-PSW07XK7TM"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag('js',new Date),gtag('config','G-PSW07XK7TM',{anonymize_ip:!0})}</script></body></html>