XenitAB/gatekeeper-library issues and pull requests

#97 - Update dependencies

Pull Request - State: closed - Opened by phillebaba over 1 year ago

#96 - Fix modifySet

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#95 - Disable a deployment from being able to update it's service account using noupdateserviceaccount

Issue - State: open - Opened by NissesSenap about 2 years ago

#94 - modifySet helm chart

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#93 - Add modifyset for removing Azure spot taint

Pull Request - State: closed - Opened by jimgus about 2 years ago

#92 - Update github actions

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#91 - Update to latest upstream lib

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#90 - Review k8s pod-security-standards to match library

Issue - State: open - Opened by NissesSenap about 2 years ago - 4 comments

#89 - Change xenit k8s psp rule to lowerCase

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#88 - k8s psp readonly rootfilesystem xenit remove ephemeral

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#87 - Update OPA-, kind and disable psp

Pull Request - State: closed - Opened by NissesSenap about 2 years ago

#86 - Add mutation for ephemeral containers

Pull Request - State: closed - Opened by NissesSenap about 2 years ago - 3 comments

#85 - ephemeralContainer mutatingwebhooks

Issue - State: closed - Opened by NissesSenap about 2 years ago - 1 comment

#84 - k8s 1.23 kubectl debug only allow single type of image

Issue - State: open - Opened by NissesSenap over 2 years ago

#83 - Update gatekeeper-lib to support k8s 1.23 checks

Pull Request - State: closed - Opened by NissesSenap over 2 years ago - 1 comment

#82 - Update github action versions

Pull Request - State: closed - Opened by phillebaba over 2 years ago

#81 - Latest gatekeeper lib with ephemeral containers and removal of duplicate lib

Pull Request - State: closed - Opened by NissesSenap over 2 years ago

#80 - Update submodule

Pull Request - State: closed - Opened by phillebaba over 2 years ago

#79 - HPA minReplicas vs PDB minAvailable check

Issue - State: open - Opened by NissesSenap over 2 years ago

#78 - Review gatekeepr-libary rules vs upstream

Issue - State: open - Opened by NissesSenap over 2 years ago

#77 - disable rolebinding to default service account

Issue - State: open - Opened by NissesSenap over 2 years ago

#76 - Update name to match ingress class instead of pod class

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago - 1 comment

#75 - Update kubectl image used in post upgrade hook

Pull Request - State: closed - Opened by phillebaba almost 3 years ago

#74 - Pod disallow service account token by default

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago - 1 comment

#73 - Update init-container-capabilities assign name

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago

#72 - Update submodule to latest version

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago

#71 - Update name init-container-capabilities to init-container-drop-capabilities

Issue - State: closed - Opened by NissesSenap almost 3 years ago

#70 - Add rule to require ingress class name

Pull Request - State: closed - Opened by phillebaba almost 3 years ago - 1 comment

#69 - Ephemeral containers security enforcement

Issue - State: closed - Opened by phillebaba almost 3 years ago

#68 - Add seccomp RuntimeDefault

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago - 1 comment

#67 - Not only drop NET_RAW but also CAP_SYS_ADMIN

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago - 1 comment

#66 - Update upstream to latest changes

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago

#65 - Add pathTests to container-drop-net-raw

Issue - State: open - Opened by NissesSenap almost 3 years ago

#64 - Drop CAP_SYS_ADMIN through mutating webhook and add a default seccomp profile

Pull Request - State: closed - Opened by NissesSenap almost 3 years ago - 4 comments

#63 - set seccompProfile to RuntimeDefault unless defined

Issue - State: closed - Opened by NissesSenap almost 3 years ago

#62 - Drop capabilities CAP_SYS_ADMIN or all by default

Issue - State: closed - Opened by NissesSenap almost 3 years ago - 4 comments

#61 - Update CRD versions

Pull Request - State: closed - Opened by phillebaba almost 3 years ago

#60 - Switch to gator CLI for testing

Issue - State: open - Opened by phillebaba almost 3 years ago - 1 comment

#59 - Update external library

Pull Request - State: closed - Opened by phillebaba almost 3 years ago

#58 - Set Helm chart version at publish

Pull Request - State: closed - Opened by jimgus almost 3 years ago

#57 - Update helm chart

Pull Request - State: closed - Opened by jimgus almost 3 years ago

#56 - Update submodule

Pull Request - State: closed - Opened by jimgus almost 3 years ago

#55 - Add assigns for init containers

Pull Request - State: closed - Opened by jimgus almost 3 years ago - 1 comment

#54 - Update major version of yq in Makefile

Pull Request - State: closed - Opened by marulkan almost 3 years ago - 4 comments

#53 - Version 4.X of yq can't be used for "make generate"

Issue - State: closed - Opened by marulkan almost 3 years ago - 1 comment

#52 - Revert "Update generated files to latest version"

Pull Request - State: closed - Opened by NissesSenap about 3 years ago

#51 - Add helm chart labels to config

Pull Request - State: closed - Opened by NissesSenap about 3 years ago

#50 - Update gatekeeper-libary to latest release

Pull Request - State: closed - Opened by NissesSenap about 3 years ago

#49 - [Feature] mutations for init containers

Issue - State: closed - Opened by NissesSenap about 3 years ago - 1 comment

#48 - drop-net-raw don't understand ALL

Issue - State: closed - Opened by NissesSenap about 3 years ago - 1 comment

#47 - Disable automountServiceAccountToken by default

Issue - State: closed - Opened by simongottschlag over 3 years ago - 3 comments

#46 - upgrade helm release to 0.7.3

Pull Request - State: closed - Opened by NissesSenap over 3 years ago

#45 - Patch submodule, update Makefile & change azureidentityformat

Pull Request - State: closed - Opened by NissesSenap over 3 years ago - 1 comment

#44 - Lint README.md

Pull Request - State: closed - Opened by NissesSenap over 3 years ago - 1 comment

#43 - configuration help aadpodidbinding, in deployment/statefullset

Issue - State: open - Opened by NissesSenap almost 4 years ago - 1 comment

#42 - Fix mutation excluded namespace list

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#41 - Update chart version

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#40 - Add mutation rules to the library

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#39 - Add unique ingress path

Issue - State: closed - Opened by simongottschlag almost 4 years ago - 1 comment
Labels: enhancement

#38 - Create SECURITY.md

Pull Request - State: closed - Opened by simongottschlag almost 4 years ago

#37 - Fix CSI unique volume constraint

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#36 - Exclude flux-system from flux constraints

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#35 - Release 0.6.0

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#34 - Fix secret store error message and rule

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#33 - Add constraints for secrets store csi unique volume

Pull Request - State: closed - Opened by phillebaba almost 4 years ago

#32 - Update external constraints

Pull Request - State: closed - Opened by phillebaba almost 4 years ago