Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / cruise-automation/k-rail issues and pull requests

#137 - Update README.md and CONTRIBUTING.md to include the deprecation notice

Pull Request - State: closed - Opened by mark-adams almost 2 years ago

#135 - feat: dependabot workflow automation for updating dependency

Pull Request - State: open - Opened by Rajpratik71 about 2 years ago - 1 comment

#134 - Add option to customize pod/containerSecurityContext

Pull Request - State: open - Opened by funkypenguin about 2 years ago - 1 comment

#133 - Add cli tool to check manifests

Pull Request - State: open - Opened by syndicut almost 3 years ago - 1 comment

#132 - exemptions on container level

Issue - State: open - Opened by empinator almost 3 years ago - 2 comments

#131 - Fix example plugin bug

Pull Request - State: open - Opened by t-kusanagi almost 3 years ago - 1 comment

#130 - Stopped collection of mutations on DELETE operations

Pull Request - State: closed - Opened by Kaezon about 3 years ago - 3 comments

#129 - "runAsNonRoot: true" should be in Pod and Container SecurityContexts

Issue - State: open - Opened by hikkyXII about 3 years ago - 5 comments

#128 - Support all ingress versions

Pull Request - State: closed - Opened by max0ne about 3 years ago

#127 - prep for v3.6.0 release

Pull Request - State: closed - Opened by dkiser about 3 years ago

#126 - Add disallow nginx snippet policy

Pull Request - State: closed - Opened by max0ne about 3 years ago

#125 - test2

Pull Request - State: closed - Opened by vinayagg about 3 years ago

#124 - Test1

Pull Request - State: closed - Opened by vinayagg about 3 years ago

#123 - Exemptions do not cover DaemonSets

Issue - State: closed - Opened by Kaezon about 3 years ago - 1 comment

#122 - Unable to delete pod

Issue - State: open - Opened by chilu49 about 3 years ago - 10 comments

#121 - Include Istio virtualservices in MutatingWebhookConfiguration

Pull Request - State: closed - Opened by somethingnew2-0 about 3 years ago - 1 comment

#119 - Policy to require Istio VirtualService Gateways

Pull Request - State: closed - Opened by somethingnew2-0 about 3 years ago

#117 - helm install --debug k-rail k-rail/k-rail --namespace k-rail fails

Issue - State: closed - Opened by csgyuri over 3 years ago - 2 comments

#116 - Added policy to block running as the root user

Pull Request - State: closed - Opened by djcass44 over 3 years ago - 1 comment

#115 - adding helm value docs to resolve #114

Pull Request - State: closed - Opened by dkiser over 3 years ago

#114 - Question: how to change the values.yaml file?

Issue - State: closed - Opened by maartenvdezz over 3 years ago

#112 - Allow multiple load balancer annotations to be required

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago - 1 comment

#111 - Bump Helm chart to v3.3.1

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago

#106 - policy executions with labels in prom metrics

Pull Request - State: closed - Opened by nictrix over 3 years ago

#105 - Bump helm chart version to 3.3.0

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago

#104 - add prometheus metrics and http middleware

Pull Request - State: closed - Opened by nictrix over 3 years ago

#103 - Bump Go version in go.mod

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago

#102 - Release v3 version of the k-rail module

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago

#101 - Fix Docker build by including protoc

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago

#100 - Add Policy Plugins for Custom K-Rail Policies

Pull Request - State: closed - Opened by somethingnew2-0 over 3 years ago - 3 comments

#99 - Release v3.1.0 of the chart

Pull Request - State: closed - Opened by dustin-decker over 3 years ago

#98 - add CRD protect policy

Pull Request - State: closed - Opened by wilreichert over 3 years ago

#97 - Add SAN to the helm generated cert

Pull Request - State: closed - Opened by dustin-decker almost 4 years ago

#96 - Add note on resource name globbing

Pull Request - State: closed - Opened by dustin-decker almost 4 years ago

#95 - Add Deny Unconfined AppArmor policy

Pull Request - State: closed - Opened by dustin-decker almost 4 years ago

#94 - Exemptions and Fuzzy Matching - Possible Bug

Issue - State: closed - Opened by ossie-git almost 4 years ago - 1 comment

#93 - k-rail Webhook Fails Due to TLS SANs Issue + Temporary Workaround

Issue - State: closed - Opened by ossie-git almost 4 years ago - 1 comment

#92 - Upgrade kubernetes packages to 1.18

Pull Request - State: closed - Opened by Ramyak almost 4 years ago - 2 comments

#91 - Add Service No External IP policy for CVE-2020-8554

Pull Request - State: closed - Opened by dustin-decker almost 4 years ago

#90 - Add customizable timeout

Pull Request - State: closed - Opened by funkypenguin about 4 years ago

#89 - Upgrade to admissionv1

Pull Request - State: closed - Opened by dustin-decker about 4 years ago

#88 - Update RBAC for PDB policy

Pull Request - State: closed - Opened by dustin-decker about 4 years ago

#87 - Support cluster exemptions

Pull Request - State: closed - Opened by dustin-decker about 4 years ago

#86 - Update deprecated api group admissionregistration.k8s.io/v1beta1

Issue - State: closed - Opened by daftping about 4 years ago - 1 comment

#84 - add invalid poddisruptionbudget policy

Pull Request - State: closed - Opened by wilreichert about 4 years ago

#82 - Fix ShareProcessNamespace check

Pull Request - State: closed - Opened by dustin-decker over 4 years ago

#81 - Pod policy check inconsistencies

Issue - State: closed - Opened by js-timbirkett over 4 years ago - 3 comments

#80 - Bug in Namespace Process Sharing

Issue - State: closed - Opened by ChrisCooney1 over 4 years ago - 1 comment

#79 - add log for issue 78: Include violating image in logs produced by pod…

Pull Request - State: closed - Opened by frenchi over 4 years ago - 2 comments

#78 - Include violating image in logs produced by pod_trusted_repository policy

Issue - State: closed - Opened by funkypenguin over 4 years ago - 2 comments

#77 - EmptyDir sizelimits no longer applied via mutation

Issue - State: open - Opened by funkypenguin over 4 years ago - 2 comments

#76 - Revert service port to 443

Pull Request - State: closed - Opened by funkypenguin over 4 years ago - 1 comment

#74 - [FR] Make terminationMessagePolicy: FallbackToLogsOnError default

Issue - State: open - Opened by dustin-decker over 4 years ago - 1 comment

#73 - Update chart folder, move examples, update README

Pull Request - State: closed - Opened by dustin-decker over 4 years ago

#72 - Add GH workflow for chart releaser

Pull Request - State: closed - Opened by funkypenguin over 4 years ago - 1 comment

#71 - Fix bug in helm chart when namespace != k-rail

Pull Request - State: closed - Opened by andyspiers over 4 years ago - 1 comment

#70 - Fix readme link

Pull Request - State: closed - Opened by dustin-decker over 4 years ago

#69 - Add no persistent volume host path policy to Readme

Pull Request - State: closed - Opened by shellw over 4 years ago

#68 - Add policy to ensure No Persistent Volume HostPath

Pull Request - State: closed - Opened by shellw over 4 years ago

#67 - Can we use regexs in exemptions?

Issue - State: closed - Opened by funkypenguin over 4 years ago - 2 comments

#66 - Add namespace to violation text

Pull Request - State: closed - Opened by shellw over 4 years ago

#65 - New: Add policy for Service type LoadBalancer

Pull Request - State: closed - Opened by bvandewalle over 4 years ago

#64 - Add Unique Ingress Host policy to readme

Pull Request - State: closed - Opened by shellw over 4 years ago

#63 - Add unique ingress host policy

Pull Request - State: closed - Opened by shellw over 4 years ago - 1 comment

#62 - [WIP] smoke test

Pull Request - State: open - Opened by dustin-decker over 4 years ago - 1 comment

#61 - Fix seccomp policy during exec

Pull Request - State: closed - Opened by dustin-decker over 4 years ago - 1 comment

#60 - exempt_policies pod_no_exec and execute to pod/container fails

Issue - State: closed - Opened by curx over 4 years ago - 5 comments

#59 - Typo fix in the README.

Pull Request - State: closed - Opened by jleadford almost 5 years ago

#58 - Updates to webhook configuration.

Pull Request - State: closed - Opened by jleadford almost 5 years ago

#57 - Drop Go 1.12.x support in CI

Pull Request - State: closed - Opened by alpe almost 5 years ago

#56 - [FR] Emergency stop button. Prevent all changes when toggled.

Issue - State: closed - Opened by dustin-decker almost 5 years ago - 3 comments

#54 - Add Evict operator

Pull Request - State: open - Opened by alpe almost 5 years ago - 6 comments

#53 - Fix build time testing

Pull Request - State: closed - Opened by dustin-decker almost 5 years ago

#52 - Race tests fail in docker build and are ignored

Issue - State: closed - Opened by alpe almost 5 years ago - 2 comments

#51 - Helm chart is not helm3-compatible

Issue - State: closed - Opened by funkypenguin almost 5 years ago - 11 comments

#50 - [FR] Immutable resource policy

Issue - State: open - Opened by dustin-decker almost 5 years ago - 3 comments

#49 - [FR] Prevent Ingress host collisions

Issue - State: closed - Opened by evilrussianhacker almost 5 years ago - 1 comment

#48 - Split Mutation and Validation into seperate webhooks

Issue - State: open - Opened by alpe almost 5 years ago - 2 comments

#47 - SPIKE: Operator to evict tainted pods - issue 18

Pull Request - State: closed - Opened by alpe almost 5 years ago - 5 comments

#46 - Ensure deployment redeploys if TLS secret changes

Pull Request - State: closed - Opened by dustin-decker almost 5 years ago

#45 - TLS handshake remote error: tls: bad certificate

Issue - State: closed - Opened by ropwareJB almost 5 years ago - 3 comments

#44 - Add a mutate image pull policy

Pull Request - State: closed - Opened by lanluo almost 5 years ago - 2 comments

#43 - [FR] Override ImagePullPolicy for configured images

Issue - State: closed - Opened by dustin-decker almost 5 years ago - 1 comment

#42 - Enforce a label policy on pods

Issue - State: open - Opened by alpe almost 5 years ago - 2 comments

#41 - Add metrics - discussion

Issue - State: open - Opened by alpe almost 5 years ago - 3 comments

#40 - Add EmptyDir size limit policy

Pull Request - State: closed - Opened by alpe almost 5 years ago - 3 comments

#37 - [FR] add node taint toleration to Pods that are targeted by a public ingress

Issue - State: open - Opened by dustin-decker almost 5 years ago - 2 comments

#36 - emptyDir without sizelimit approach

Issue - State: closed - Opened by jleadford almost 5 years ago - 5 comments

#18 - [FR] evict tainted pods after period

Issue - State: open - Opened by dustin-decker about 5 years ago - 4 comments

#16 - [FR] webhook for enforced violations

Issue - State: open - Opened by dustin-decker about 5 years ago - 1 comment

#9 - [FR] add tainted annotation to Pods that have been execed into

Issue - State: open - Opened by dustin-decker about 5 years ago - 6 comments

#2 - Upload helm charts to a repo?

Issue - State: closed - Opened by drnic about 5 years ago - 3 comments