KubeSentry

KubeSentry is a web app + Kubernetes admission controller that blocks or warns on high-risk changes before they land in a cluster. It focuses on the boring, expensive failures: privileged pods, missing resource limits, unsafe hostPath mounts, public Services, and mis-scoped RBAC. Instead of dumping policy YAML on teams, it provides a guided “why this is risky” explanation, a one-click safe alternative manifest, and an audit trail tied to Git commits and CI runs. It ships with opinionated, practical guardrails that work out of the box for most orgs, plus a simple policy editor for exceptions with time-bound approvals. It also generates weekly reports showing which repos and teams cause the most blocked changes, so platform teams can target fixes. This is an AI + traditional app: AI helps explain and suggest safer patches, but enforcement is deterministic.