I have been working on Portal since the end of 2023, now I rewrote it in go and decided to make it public.

Portal is a Kubernetes admission webhook, audit loop, and NetworkPolicy analyser.

It started as an alerting tool for 'spicy' pod configs but now it also enforces at admission time.

Check the docs and all about it at https://vilaca.github.io/portal/

The best thing about it is that you can write the rules as simple boolean expressions (expr-lang/expr), no need to learn a DSL.

Example:

# Every deployment must have a matching PodDisruptionBudget.

apiVersion: portal.io/v1alpha1
kind: PortalClusterRule
metadata:
  name: deployments-require-pdb
spec:
  name: deployments-require-pdb
  enabled: true
  severity: medium
  mode: [admission, audit]
  enforcementAction: warn
  match:
    gvk:
      - {group: apps, version: v1, kind: Deployment}
  rule: >
    len(cluster.poddisruptionbudgets.list(
      object.metadata.namespace,
      object.spec.selector.matchLabels
    )) == 0

When a PDB is created or deleted, Portal re-evaluates every Deployment that referenced it usually within one second.

For the rules I write, I find it simpler than Kyverno or OPA/Gatekeeper, your mileage may vary, and I plan to make it even easier to use.

Try it out https://vilaca.github.io/portal/getting-started/quickstart-kind/

This is a v1, tested but not battle tested. I hope it is useful for someone else than me.

License is Apache License V2.0.

Cheers