# Kube-Policies: Guardrails for Apps Running in Kubernetes

DevFeed: [Kube-Policies: Guardrails for Apps Running in Kubernetes](<https://devfeed.tech/articles/kube-policies-guardrails-for-apps-running-in-kubernetes-15739.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/kube-policies-guardrails-for-apps-running-in-kubernetes>)

Author: Hardik Darji

Published: 2025-01-28T08:00:00Z

Content type: article

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [cloud security](<https://devfeed.tech/topics/cloud-security.md>), [Open Policy Agent](<https://devfeed.tech/topics/open-policy-agent.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [SIEM, Security, Observability](<https://devfeed.tech/topics/siem-security-observability.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [observability](<https://devfeed.tech/tags/observability.md>), [open-policy-agent](<https://devfeed.tech/tags/open-policy-agent.md>), [security](<https://devfeed.tech/tags/security.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [testing](<https://devfeed.tech/tags/testing.md>)

## AI overview

This article introduces Square's design considerations for security guardrails in Kubernetes environments. It explains why default Kubernetes configurations can leave applications vulnerable and describes requirements for an abstraction layer built on Open Policy Agent, including policy dry-runs, minimal user disruption, testing, exception management, extensibility, and observability.

## Source excerpt

Design considerations for highly sensitive environments.