Skip to main content

Cloud Custodian - Kubernetes Provider

Project description

Custodian Kubernetes Support

Cloud Custodian can run policies directly inside your cluster, reporting on resources that violate those policies, or blocking them altogether.

Running the server

c7n-kates can be run and installed via poetry. poetry install && poetry run c7n-kates.

name default description
--host (optional) The host that the server should listen on.
--port 8800 (optional) The port the server will listen on.
--policy-dir Path to the policy directory.
--on-exception warn Action to take on an internal exception. One of: warn, deny.
--cert Path to the certificate.
--ca-cert Path to the CA's certificate.
--cert-key Path to the certificate's key.

Generate a MutatingWebhookConfiguration

After the server is running, you'll need to configure and install the MutatingWebhookConfiguration manually. To generate a webhook configuration, you can run poetry run c7n-kates --generate --endpoint $ENDPOINT_URL --policy-dir $DIR, and it will generate an appropriate configuration for you, based on your policies.

Note: some modification of the webhook configuration may be required. See the documentation on webhooks for more configuration.


You can use skaffold to assist with testing and debugging this controller. Run skaffold dev in this folder to deploy the local container into a local kubernetes cluster. It will automatically redeploy it as files change.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

c7n_kube-0.2.32-py3-none-any.whl (25.8 kB view hashes)

Uploaded py3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page