Guardon — Developer-First Kubernetes Governance

A lightweight browser extension that validates Kubernetes YAML files in real time against common security and compliance guardrails. ## Features - Validate Kubernetes YAML (multi-document) directly in the browser popup. - Advanced rule engine: - Pattern checks (regex) and per-element wildcard support (e.g.,containers[*].image) - Required-field checks with per-element reporting - Kind-based filtering (comma-separated, case-insensitive) - Optional fix suggestion metadata (preview & copy patched YAML) - Kyverno policy importer (prototype): Converts simple Kyverno validate patterns into internal rules and preserves raw policies for audit. - Explain button: Attach rationale and external references (CIS, NIST, Kyverno) to rules and surface them in the popup. - Safe content-script behavior: Non-invasive (no auto-injection); validation happens only on explicit action (popup) or manual paste. - Background fetch helper for importing remote rule files or raw YAML from hosts like raw.githubusercontent.com. - Dark theme for comfortable day/night workflows. - Optional OPA WASM integration: Import a compiled policy.wasm, evaluate it alongside built-in rules, and surface OPA findings in the same results table. - Schema-aware validation: Import Kubernetes OpenAPI/“swagger” specs and CRDs to validate resources (e.g., Deployments) against cluster schemas, including $ref resolution and type checking. - Unified results view: Combine rule-based, schema-based, and OPA-based findings into one table with a “Source” column and per-issue actions (preview, copy, explain). - Enhanced rule manager: Search/filter rules by ID, description, or match path; see enabled/disabled counts; edit rules with rich metadata (fix JSON, rationale, references); and delete via confirmation dialog. - Flexible rule import/export: Move rules between environments via JSON (file, URL, or clipboard) and apply Kyverno-derived rules through a preview-and-select flow.