Kubewarden: Leveraging and Extending CEL for your Cluster...
Lightningat KubeCon + CloudNativeCon Europe 2025 · on Tuesday, 2025-04-01· at 09:31· Platinum Suite | Level 3·
summary
Kubewarden reuses the upstream CEL interpreter and compiles CEL into WebAssembly so policies are compiled into WASM and remain backwards compatible with Kubernetes 1.29 CEL. It adds context-aware capabilities plus telemetry and policy reports, exposes cluster queries (Kubernetes resources, OCI registry verification, network checks), offers SDKs for Go/Rust/C#/JavaScript, and lets operators pass external variables to policies; ready-made policies appear on ArtifactHub.
AI-written summary · about
related talks
36mBuilding a universal policy platform for Kubernetes - Victor Cuadrado Juan
29mCompliance in Kubernetes: Enforcing and Visualizing
35mWebhook Fatigue? You're Not Alone: Introducing the CEL Expression Language Features Solving This Problem
34mKyverno Gets Smarter: Writing Dynamic Policies with CEL
33mA Field Guide To Integrating CEL in the Kubernetes Codebase
16mDeep Dive: Kubernetes Policy WG
05mBlocking Vulnerable Workloads Out (And Catching What Got I...
20mTrust but Verify