Kubewarden components on Kubewarden

Network Enforcer

Wed, 16 Sep 2026 00:00:00 +0000

Why Network Enforcer?

Learn from real traffic

Observe the communication patterns of running workloads instead of manually guessing every allowed peer and port.

Roll out safely

Start in monitor mode. See unexpected communication before you decide to block it.

Use your existing network stack

Build on Istio Ambient, Calico, or Cilium instead of introducing another data plane.

Kubernetes-native enforcement

Turn learned behavior into an Istio AuthorizationPolicy or a Kubernetes NetworkPolicy.

Runtime Enforcer

Wed, 16 Sep 2026 00:00:00 +0000

Why Runtime Enforcer?

Learn from real workloads

Observe the processes your workloads actually run, and get a policy proposal generated automatically for each one.

Roll out safely

Start in monitor mode and see violations reported before you switch a workload to enforcement.

Enforce at runtime

Use eBPF to block executables that are not on a workload's allow-list.

Kubernetes-native

Manage policies as Kubernetes resources, and export violation events through OpenTelemetry.

SBOM Scanner

Wed, 16 Sep 2026 00:00:00 +0000

Why SBOM Scanner?

Know what you run

Generate SBOMs for images, workloads, and nodes.

Focus on real risk

Use VEX to identify findings that do not affect your software. Support for KEV and EPSS is on the way.

Scan only what matters

Scan registries or automatically follow deployed workloads.

Kubernetes-native

Configure scans and consume results with Kubernetes resources.

Scan what matters

Choose the scanning workflow that fits your environment.

Admission Controller

Fri, 16 Apr 2021 13:28:46 +0200

Why the Admission Controller?

Write policies your way

Use Rust, Go, Rego, CEL and other familiar technologies.

Distribute like containers

Package and share policies through standard OCI registries.

Build once, run anywhere

Policies are compiled to WebAssembly for portability and isolation.

Start from the community

Use and extend a growing collection of ready-to-use policies.

Built for the people doing the work

For policy authors

Write, test, and share policies as regular software.