Kubewarden

Recording of the #Kubewarden October Community meeting is now live: www.youtube.com/watch?v=7_-a...

Later today, we'll have our Monthly #Kubewarden Community meeting. If you want to find out what happened over the past month, get involved or just have a chat, then drop by: zoom-lfx.platform.linuxfoundation.org/meetings/kub...

📣 SBOMscanner v0.13.0 has been released! This release adds the OpenTelemetry integration: traces and metrics for every component, from the admission webhook down to the storage SQL statements. 📝 Blog post: www.kubewarden.io/blog/2026/09... 📚 OTel user guide: docs.kubewarden.io/sbom-scanner...

🎉 Admission Controller v1.38 has been released! This release includes a CVE fix ⚠️ with a new resource allowlist for namespaced policies, and both memory hardening and memory consumption improvements! Have a look at out release blog post: www.kubewarden.io/blog/2026/09...

We've redone our website 🥳 Check it out on kubewarden.io!

And now it's official: #OpenChoreo is now an Adopter of #Kubewarden 🥳 github.com/kubewarden/c...

Process ID isolation is a fundamental confinement employed by today's container engines, including containers running on #Kubernetes. Forbidding this (sometimes unwanted) feature is easy with #Kubewarden, find out how in our newest blog post 👇 www.kubewarden.io/blog/2026/09...

Woop, woop, it's September already and time for another community meeting! If you missed it, then find the recording over on YouTube: www.youtube.com/watch?v=so6R...

Kubewarden's policies can apply guardrails on all kinds of resources of your #Kubernetes cluster. For instance, you can restrict the amount of CPU and memory that your pods and deployments can request. Find out how in our newest blog post: www.kubewarden.io/blog/2026/08...

⚠️ Kubewarden Admission Controller 1.37.2 is out! ⚠️ This is a patch release that fixes a medium security bug in Admission Controller, in addition to some UX bugs, please update. You can read all about it in our blog post: www.kubewarden.io/blog/2026/08...

🚀 Kubewarden Admission Controller 1.37 is out! ⚠️ Important migration: - The 3 charts of 1.36 (kubewarden-crds, kubewarden-controller, kubewarden-defaults) are now deprecated. - 1.37 onward is now shipped as the new chart admission-controller, version 6.0.0. www.kubewarden.io/blog/2026/07...

Kubewarden SBOMScanner v0.12.0 is out! 🚀 This release brings a new feature, Node scans, for the operating system, the container runtime, the kubelet, and other system-level packages. As always, you can read more about it on our blog : www.kubewarden.io/blog/2026/07...

🚀 Kubewarden Admission Controller v1.36 is out! 🚀 In this release we have change reconciliation loop logic, rename out admission controller monorepo and added host network support. Besides that, the documentation is now built using Antora. Read more about at: www.kubewarden.io/blog/2026/05...

SBOMscanner 0.11.0 is out 🎉! An MCP server so your AI assistant can query CVEs across registries and workloads, targeted ScanJobs, zizmor-hardened CI, and storage race fixes. www.kubewarden.io/blog/2026/05...

:rocket: Kubewarden Admission Controller v1.35 is out! This one brings a feature to fix a medium security vulnerability for namespaced policies that make use of host capabilities. Be sure to check it out! Read all about it here: www.kubewarden.io/blog/2026/04...

🚀 Admission Controller v1.34.0 is out! This one is about a small bug fix on kwctl scaffold , some CI hardening, and wildcard support for the trusted-repos policy. Read our blogpost for more details: www.kubewarden.io/blog/2026/04...

🚀 SBOMscanner v0.10.0 is out! This release introduces workload scanning, making it easier to analyze running workloads in the cluster. Read the blog post for details www.kubewarden.io/blog/2026/03...

🚀 Kubewarden 1.33 has been released! Includes a security fix, new features, and some deprecations. Details in the blog www.kubewarden.io/blog/2026/03...

Folks, we've had people get in touch about CVE-2026-22039 (for a different adm controller, not us) and share concerns about admission controllers and cross-ns privilege escalation. Thanks to our architecture we are not vulnerable to this. Read more here: www.kubewarden.io/blog/2026/02...

Kubewarden 1.32 is out! This release is a big maintenance one were we have moved to monorepos. Some changes to release artifacts too! Check out our blogpost: www.kubewarden.io/blog/2026/02...

Kubewarden 1.31 is out! 🎉 This release comes with BYO-PKI for Sigstore in kwctl , a new policy, support for backups and some Helm chart improvements! Read all about it in our release blog post: www.kubewarden.io/blog/2025/11...

📣 Great news on the SDKs side, Kubewarden now has a Typescript/Javascript SDK for policies! This was the work of @Esosa Ohangbon as his Google Summer of Code contribution. Join us in congratulating him for a job well done! 👏 Read all about it in his blogpost www.kubewarden.io/blog/2025/11...

📢 Big news from Kubewarden! We’re going beyond admission policies with our new sub-project: SBOMscanner. SBOMscanner is a Kubernetes-native SBOM & vulnerability scanner. 🔎 🐞 Learn more in our latest blog 👇 www.kubewarden.io/blog/2025/11...

Kubewarden 1.30 is out! 🎉🎉 This release comes with migrations for Cosign v3 and OpenReports, plus a couple of features to existing policies: CEL policy supports params now, and PriorityClass supports a denylist and mutation. Check it out as always in our blogpost: www.kubewarden.io/blog/2025/10...

We just tagged a new a patch release of Policy Server. This is the second patch release in a week. The first one allowed Policy Server to work in a degraded mode, while the one from today brings back all the verification capabilities. Checkout www.kubewarden.io/blog/2025/10... for more details.

We just released patch releases of Policy Server and kwctl to address an issue with Sigstore's TUF repository. You can find all the details here www.kubewarden.io/blog/2025/10...

🎉🎉 Kubewarden v1.29 is out! This one comes as usual with a mix of stack and policy features, paid tech-debt, some fixes, and community work mentions! Read all about it in our blog post: www.kubewarden.io/blog/2025/10...

Folks, we are happy to announce Kubewarden version 1.28! :tada: This release cycle comes with Hauler support, improvements on policies, and kwctl bugfixes. You can read all about it in our release blog post: www.kubewarden.io/blog/2025/08...

Exciting news! 🚀 Our Google Summer of Code student has been hard at work building a new Javascript SDK for Kubewarden. Check out his latest blog post on www.kubewarden.io/blog/2025/07... to learn more about his journey and contributions! 🌟

Kubewarden version 1.27 is out! 🎉 This release comes with a new host capability & matching policy, kwctl enhancements, and a small update on the work of our GSoC mentee in the new JavaScript SDK. You can read about it in our release blog post: www.kubewarden.io/blog/2025/07...

Kubewarden 1.26 is out! 🚀 Now you can run multiple policies from YAML locally with `kwctl`, and set custom rejection messages for your policies (while still having the default messages). For these and more, have a look at our blog post! #kubewarden, #kubernetes, #release

Kubewarden 1.25 is here! 🚀 This development cycle brings support for Kubernetes priority classes and significant CI enhancements. Discover what's new and keep an eye out for what's coming next! www.kubewarden.io/blog/2025/05...

📢 Check out our latest blog post announcing Kubewarden's collaboration with the Kubernetes ecosystem and our involvement with the brand new OpenReports project! 🚀 👇 www.kubewarden.io/blog/2025/04...

Kubewarden 1.24 is out! 🚀 We have promoted our policies as v1.0.0, and we have a bunch of small goodies for you! Check out what's new and stay tuned to what's coming next! www.kubewarden.io/blog/2025/04...

Discover how Kubewarden can protect you from the critical #IngressNightmare vulnerability (CVE-2025-1974): www.kubewarden.io/blog/2025/04...

Also, if you want to learn how Kubewarden simplifies policy management in Kubernetes, watch this CNCF-hosted webinar www.kubewarden.io/blog/2025/03...

🚀 The wait is over—Kubewarden 1.23 is here! Packed with security enhancements, smoother workflows, and key updates to elevate your Kubernetes experience. Dive into what's new: www.kubewarden.io/blog/2025/03... 🌟 #Kubernetes #DevSecOps #Security #PolicyAsCode

A new patch release of kwctl is out! 🎉 This update fixes a bug that could prevent policies from being pushed to a registry. Check out the full details here: www.kubewarden.io/blog/2025/03...

Kubewarden 1.22 is out! 🚀 This release brings key improvements and sets the stage for even bigger changes in the next version. Check out what's new and stay tuned for what's coming next! 🔥 Read more here: www.kubewarden.io/blog/2025/02...

Today we published a patch release of kwctl and Policy Server to address a breaking change that took place inside of Sigstore's TUF repository. Checkout this blog post to learn more about it: www.kubewarden.io/blog/2025/02...

Kubewarden v1.21 is here! This release includes 2 medium security fixes and the usual amount of improvements. Read more about it on our blog: www.kubewarden.io/blog/2025/01...