1 个仓库
Settings that define default failure actions, policy selection, resource exclusions, and custom failure messages for Kubernetes policy enforcement.
Distinct from Policy-to-Namespace Mappers: Distinct from Policy-to-Namespace Mappers: focuses on general policy behavior settings like failure actions and exclusions, not namespace mapping.
Explore 1 awesome GitHub repository matching security & cryptography · Policy Behavior Configurations. Refine with filters or upvote what's useful.
Datree is a policy enforcement framework for Kubernetes that validates configurations against rules written in Rego, JSON Schema, or CEL. It operates as both a command-line tool for pre-deployment scanning and as a cluster-side admission webhook for real-time enforcement, integrating with CI/CD pipelines and continuous delivery tools like ArgoCD and FluxCD. The framework supports namespace-scoped policy mapping, allowing different policies to apply to different namespaces, and provides a skip annotation mechanism for selectively bypassing rules on individual resources or entire namespaces. It
Set a default action on failure, choose which policy to use, define resources or namespaces to ignore, and customize rule failure messages.