{"id":23591470,"url":"https://github.com/dvob/k8s-wasm","last_synced_at":"2026-03-09T16:03:36.856Z","repository":{"id":48174122,"uuid":"509446159","full_name":"dvob/k8s-wasm","owner":"dvob","description":"Extend Kubernetes with WebAssembly","archived":false,"fork":false,"pushed_at":"2023-04-16T21:46:06.000Z","size":143,"stargazers_count":10,"open_issues_count":0,"forks_count":2,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-10-19T14:57:55.157Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dvob.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-07-01T12:26:55.000Z","updated_at":"2025-01-24T23:22:25.000Z","dependencies_parsed_at":"2024-06-20T00:24:41.872Z","dependency_job_id":null,"html_url":"https://github.com/dvob/k8s-wasm","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/dvob/k8s-wasm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dvob%2Fk8s-wasm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dvob%2Fk8s-wasm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dvob%2Fk8s-wasm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dvob%2Fk8s-wasm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dvob","download_url":"https://codeload.github.com/dvob/k8s-wasm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dvob%2Fk8s-wasm/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30301530,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-09T14:33:48.460Z","status":"ssl_error","status_checked_at":"2026-03-09T14:33:48.027Z","response_time":61,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-27T07:39:09.175Z","updated_at":"2026-03-09T16:03:36.826Z","avatar_url":"https://github.com/dvob.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Kubernetes API Access Extensions with WebAssembly\n\nThis repository documents an extension of the Kubernetes API server which allows using WebAssembly modules to perform/extend the following actions:\n* Authentication\n* Authorization\n* Admission (validating and mutating)\n\nTo implement this, I forked the Kubernetes source code and extended the API server accordingly: https://github.com/dvob/kubernetes/tree/wasm.\n\nThe extension is **not intended for production use**. It is a proof of concept to show how WebAssembly could be used to extend Kubernetes.\n\nIn the fork I created a new package [`pkg/wasm`](https://github.com/dvob/kubernetes/tree/wasm/pkg/wasm) in which I implemented an Authenticator, Authorizer and AdmissionController.\nMost of the implementation lives in this new package.\nThere are only a few changes in the `pkg/kube-apiserver` package to add command line options enabling the WASM Authenticator, Authorizer and AdmissionController.\n\nTo run the WebAssembly modules we use the [Wazero](https://github.com/tetratelabs/wazero) runtime.\nWazero has zero dependencies and does not rely on CGO. Hence, it can be easily integrated in a Go project without adding a ton of dependencies.\n\nTo pass data between our extension (host) and the WASM modules we make use of the capabilities of [WASI](https://wasi.dev/) (`fd_read`, `fd_write`).\nThe module reads the input data from standard input and writes the result to standard output.\nSee the [Module specification](./spec/) for the full details on how data is passed between host and modules.\nFor Admission the extension also supports to use [Kubewarden policies](https://hub.kubewarden.io/) which are not context aware.\n\nSee [Build and test Kubernetes API server](./docs/build-publish/) for a manual on how to build and test API server fork with the WASM extension.\n\nSee [User Documentation](./docs/user-doc/) for a full description on how to setup and configure the extended API server.\n\nTo implement your own modules see the [Module Specification](./spec/).\nIf you want to use Rust to implement the modules you can use the [k8s_wasi](https://github.com/dvob/k8s-wasi-rs) helper library.\n\n## Links Overview\n* [User Documentation](./docs/user-doc): How to setup and configure the WASM extension\n* [Kubernetes Cluster Setup](./docs/cluster-setup/): How to setup a Kubernetes cluster\n* [Module Specification](./spec/): \n  * [Rust module library](https://github.com/dvob/k8s-wasi-rs): Rust library which simplifies the creation of WASM modules according to the Module Specification.\n* Experiments (PoCs)\n  * [WASM](./wasm/)\n    * [Runtimes](./wasm/runtime): Comparison of WebAssembly Runtimes\n    * Data passing ([Modules](./wasm/modules/rs), [Runtimes](./wasm/runtime/))\n  * [Kubernetes Integration](./k8s/)\n    * [Webhook](./k8s/webhook/)\n    * [Direct in API server](./k8s/api-server/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdvob%2Fk8s-wasm","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdvob%2Fk8s-wasm","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdvob%2Fk8s-wasm/lists"}