Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / GoogleCloudPlatform/policy-library issues and pull requests

#100 - Added constraint & template to allow only private cluster.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#100 - Added constraint & template to allow only private cluster.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#99 - Constraint to allow only private gke cluster

Issue - State: closed - Opened by joecheuk over 5 years ago

#99 - Constraint to allow only private gke cluster

Issue - State: closed - Opened by joecheuk over 5 years ago

#98 - Added constraint & template to check for gke master auth networks enablement

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#98 - Added constraint & template to check for gke master auth networks enablement

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#97 - Constraint to check GKE master auth network enablement

Issue - State: closed - Opened by joecheuk over 5 years ago

#97 - Constraint to check GKE master auth network enablement

Issue - State: closed - Opened by joecheuk over 5 years ago

#96 - Update plural names in templates to be all lowercase

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#96 - Update plural names in templates to be all lowercase

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#95 - Added constraint & template for gke disable legacy endpoints.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#93 - update violation metadata to include resource name for IAM constraints

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#93 - update violation metadata to include resource name for IAM constraints

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#92 - Constraint Template naming requirement

Issue - State: open - Opened by t12g over 5 years ago - 3 comments

#92 - Constraint Template naming requirement

Issue - State: open - Opened by t12g over 5 years ago - 3 comments

#91 - Add a "Compute" prefix for the GCE VM external IP access template

Pull Request - State: closed - Opened by t12g over 5 years ago - 1 comment
Labels: cla: yes

#90 - add constraint & template for Cloud Storage "Bucket Policy Only"

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#90 - add constraint & template for Cloud Storage "Bucket Policy Only"

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#89 - add constraints & templates for storage location

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#88 - Added constraint&template to check if auto upgrade is enabled on the node.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#86 - Added constraint&template to restrict client auth methods on gke.

Pull Request - State: closed - Opened by joecheuk over 5 years ago - 2 comments
Labels: cla: yes

#86 - Added constraint&template to restrict client auth methods on gke.

Pull Request - State: closed - Opened by joecheuk over 5 years ago - 2 comments
Labels: cla: yes

#85 - Restrict client auth method on GKE

Issue - State: closed - Opened by joecheuk over 5 years ago

#84 - Add constraint & constraint template to check for node SA account scopes.

Issue - State: closed - Opened by joecheuk over 5 years ago - 1 comment

#83 - add constraint for storage bucket location

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#82 - Reorganize asset and constraint fixtures per issue #63

Pull Request - State: closed - Opened by ddremund over 5 years ago - 2 comments
Labels: cla: yes

#81 - add samples for GCPStorageBucketWorldReadableConstraintV1 and GCPStorageLoggingConstraintV1 kind

Pull Request - State: closed - Opened by katze120 over 5 years ago
Labels: cla: yes

#80 - Reorganize fixtures for dataset location and compute zone constraints

Pull Request - State: closed - Opened by ddremund over 5 years ago - 3 comments
Labels: cla: yes

#79 - Added constraint & constraint template to check for node SA account scopes.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#78 - move inline comment directive to be in the same line as the pipe

Pull Request - State: closed - Opened by t12g over 5 years ago - 1 comment
Labels: cla: yes

#77 - Constraint template to verify audit logging enablement

Pull Request - State: closed - Opened by t12g over 5 years ago - 1 comment
Labels: cla: yes

#76 - Adding GCPResourceValuePatternConstraintV1

Pull Request - State: closed - Opened by abombss over 5 years ago - 6 comments
Labels: cla: yes

#75 - Add a sample constraint template

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#74 - Updated constraint kind to be more consistent.

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#73 - Fix indentation of rego string literal

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#72 - Dataset location

Pull Request - State: closed - Opened by ddremund over 5 years ago - 1 comment
Labels: cla: yes

#71 - Add CI support

Issue - State: closed - Opened by morgante over 5 years ago - 1 comment

#70 - Rename gcp_storage_bucket_world_readable.yaml to append v1 suffix

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#69 - Removed cidr_contains match from SQLAuthorizedNetwork constraint

Pull Request - State: closed - Opened by mmontan over 5 years ago
Labels: cla: yes

#68 - Fix indentation on template .yaml files

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#67 - Add validator to restrict user created service accounts

Pull Request - State: closed - Opened by borgmonster over 5 years ago - 2 comments
Labels: cla: yes

#65 - Policy to restrict creation of GKE cluster to specific zones or regions

Pull Request - State: closed - Opened by aaronsutton over 5 years ago - 5 comments
Labels: cla: yes

#64 - Add policy to forbid world readable storage bucket.

Pull Request - State: closed - Opened by matthewmarr over 5 years ago - 1 comment
Labels: cla: yes

#63 - Modifying fixture library likely to affect multiple constraint templates

Issue - State: closed - Opened by ddremund over 5 years ago - 20 comments

#62 - Update description serviceusage_deny_apis.yaml

Pull Request - State: closed - Opened by reechar-goog over 5 years ago
Labels: cla: yes

#61 - Add a "legacy" directory under "templates"

Pull Request - State: closed - Opened by t12g over 5 years ago
Labels: cla: yes

#60 - Enforce location of compute resources (instances and persistent disks)

Pull Request - State: closed - Opened by ddremund over 5 years ago - 1 comment
Labels: cla: yes

#59 - Constraint to enforce CMEK encryption on tables for BigQuery

Pull Request - State: closed - Opened by anandj123 over 5 years ago - 3 comments
Labels: cla: yes

#58 - Update descriptions/metadata for GLB constraint

Pull Request - State: closed - Opened by morgante over 5 years ago
Labels: cla: yes

#57 - initial commit for cmek rotation

Pull Request - State: closed - Opened by kevensen over 5 years ago
Labels: cla: yes

#56 - Add policy to enforce CMEK encryption on buckets

Pull Request - State: closed - Opened by aolarte over 5 years ago - 3 comments
Labels: cla: yes

#55 - Forbid public IP on Google Load Balancer

Pull Request - State: closed - Opened by altarace over 5 years ago - 2 comments
Labels: cla: yes

#54 - Fix formatting for templates

Pull Request - State: closed - Opened by morgante over 5 years ago
Labels: cla: yes

#53 - Restrict CloudSQL instances with public IP

Pull Request - State: closed - Opened by kevensen over 5 years ago - 2 comments
Labels: cla: yes

#52 - diskEncryptionKey: value not supported by CAI for Persistent Disks

Issue - State: open - Opened by ddremund over 5 years ago - 4 comments

#51 - Feature/serviceusage constraint

Pull Request - State: closed - Opened by reechar-goog over 5 years ago - 5 comments
Labels: cla: yes

#50 - Getting started in Cloud Shell

Issue - State: open - Opened by morgante over 5 years ago - 1 comment

#49 - Regenerated the policy templates to include the updated sql authorized network rego script

Pull Request - State: closed - Opened by mmontan over 5 years ago
Labels: cla: yes

#48 - Updated the README to include a link to the constraint template authoring guide.

Pull Request - State: closed - Opened by mmontan over 5 years ago - 1 comment
Labels: cla: yes

#47 - Check if pod traffic is restricted with network policy

Pull Request - State: closed - Opened by joecheuk over 5 years ago
Labels: cla: yes

#46 - Split template authoring section into its own page

Pull Request - State: closed - Opened by t12g over 5 years ago

#45 - Added a constraint for limiting Authorized Networks in Cloud SQL

Pull Request - State: closed - Opened by mmontan over 5 years ago - 1 comment
Labels: cla: yes

#44 - Fix username in CODEOWNERS

Pull Request - State: closed - Opened by morgante over 5 years ago

#43 - Add requirements.txt for build script and format new policies

Pull Request - State: closed - Opened by morgante over 5 years ago

#42 - Update .rego file names

Pull Request - State: closed - Opened by t12g over 5 years ago - 4 comments

#41 - "make build" should validate template files

Issue - State: closed - Opened by t12g over 5 years ago - 1 comment

#39 - Format constraint templates.

Pull Request - State: closed - Opened by joecheuk over 5 years ago

#38 - add dnssec constraint template

Pull Request - State: closed - Opened by tangyan over 5 years ago

#37 - Add GCPCloudSQLSSLV1 constraint template

Pull Request - State: closed - Opened by zhuzeng over 5 years ago

#36 - Update CAI endpoint to v1

Pull Request - State: closed - Opened by t12g over 5 years ago

#35 - Feature Request: Generic Policy Example

Issue - State: open - Opened by Red-Five over 5 years ago - 4 comments

#34 - add a sentence for resource type naming convention

Pull Request - State: closed - Opened by t12g over 5 years ago

#33 - Append versioning info to template metadata name and file name.

Pull Request - State: closed - Opened by t12g over 5 years ago

#32 - Consider breaking down the user guide into multiple files

Issue - State: open - Opened by joecheuk over 5 years ago - 2 comments

#31 - Added constraint template and sample constraint to check legacy ABAC.

Pull Request - State: closed - Opened by joecheuk over 5 years ago - 11 comments
Labels: cla: yes

#30 - Add a section to go over authoring convention

Pull Request - State: closed - Opened by t12g over 5 years ago

#29 - Split comprehensions across multiple lines to improve readability

Pull Request - State: closed - Opened by morgante over 5 years ago

#28 - Added constraint template to scan for gke dashboard.

Pull Request - State: closed - Opened by joecheuk over 5 years ago

#24 - Update user guide

Pull Request - State: closed - Opened by t12g over 5 years ago

#23 - Add constraint to restrict IAM bindings

Pull Request - State: closed - Opened by morgante over 5 years ago - 1 comment

#22 - Append "V1" version suffix to constraint template name

Pull Request - State: closed - Opened by t12g over 5 years ago - 1 comment

#21 - Add constraint template for limiting IAM roles

Issue - State: closed - Opened by morgante over 5 years ago

#20 - Use "organization" instead of "organizations" in match target

Pull Request - State: closed - Opened by t12g over 5 years ago

#19 - Add version information as constraint template name suffix

Pull Request - State: closed - Opened by t12g over 5 years ago

#18 - Deployment Manager support

Issue - State: open - Opened by abdennebi over 5 years ago - 3 comments

#17 - Terraform Validator Source Code ?

Issue - State: closed - Opened by abdennebi over 5 years ago - 2 comments

#16 - Testing cloud build again; DO NOT MERGE

Pull Request - State: closed - Opened by t12g over 5 years ago

#15 - testing 123

Pull Request - State: closed - Opened by t12g over 5 years ago

#14 - Updated resource type to reference to CAI GA resource type.

Issue - State: closed - Opened by joecheuk over 5 years ago

#13 - Updated resource type to reference to CAI GA resource type.

Pull Request - State: closed - Opened by joecheuk over 5 years ago

#12 - Add make target for building and pushing Cloud Build Docker image

Pull Request - State: closed - Opened by t12g over 5 years ago

#11 - Add cloudbuild support

Pull Request - State: closed - Opened by t12g over 5 years ago