luxas/cedar-sql
A Cedar evaluator/authorizer which (primarily) runs on an SQL database
@cedar-policy Maintainer | @cncf Ambassador | @kubernetes contributor | Senior Applied Scientist at @aws | KCD Helsinki co-founder | KubeCon Keynote Speaker
Repositories
luxas/enhancements
Feature tracking repo for Kubernetes releases
luxas/kubernetes
Container Cluster Manager from Google
luxas/cedar
Implementation of the Cedar Policy Language
luxas/kubeadm-workshop
Showcasing a bare-metal multi-platform kubeadm setup with persistent storage and monitoring
luxas/cedar-k8s-networkpolicy-compiler
Reason about Kubernetes Network Policies through Cedar Analysis
luxas/cedar-woodpecker
A tool that detects and derives implicit permissions from explicit policies, finding privilege escalation attack vectors.
luxas/cedar-woodpecker-spec
luxas/vscode-cedar-woodpecker
luxas/vscode-cedar
Cedar policy language extension for Visual Studio Code
luxas/gitdm
📜Fork for tracking CNCF projects
luxas/cncf-people
Stores the data that will populate the various people listings on cncf.io
luxas/speakerdeck-api
A scraper implementation for Speakerdeck, as a workaround due to the lack of an official API
luxas/research
A place where I host some research content I've produced
luxas/lott
An ott-like DSL embedded in Lean.
luxas/kubernetes-on-arm
Kubernetes ported to ARM boards like Raspberry Pi.
luxas/k8s-website
Website/documentation repo
luxas/kube-rebac-authorizer
Beyond RBAC: Implementing Relation-based Access Control for Kubernetes with OpenFGA
luxas/kube-openapi
Kubernetes OpenAPI spec generation & serving
luxas/cncf-foundation
☁️♮🏛 This repo contains several documents related to the operation of the CNCF. File non-technical issues related to CNCF here.
luxas/gitdm.archive
Fork for tracking CNCF projects
luxas/os-kernel
Linux Kernel for RancherOS
luxas/dashboard
luxas/video-grabber
Transform your VHS tapes to digital video using a Terratec Grabby and Docker
luxas/docker-rpi-xrdp-desktop
Container with Raspbian, lxde and xrdp
luxas/deklarative
A library to work with serialized declarative configuration, e.g. Kubernetes-style YAML in a file
luxas/cedar-access-control-for-k8s
Cedar for Kubernetes brings the power of Cedar to Kubernetes authorization and admission validation, showing how cluster administrators can enable a unified access control language for principals making API calls and giving policy authors a single language to write and reason about
luxas/cedar-examples
Some examples of using the Cedar language to specify authorization
luxas/supernetes
Kubernetes bridge for Supercomputers
luxas/benchmark
Dockerized C benchmarks for both ARM and amd64 hardware