The Kyverno Project (CNCF)

A Kubernetes-native policy engine that enforces, mutates and generates resources through admission webhooks, with policies written as YAML.