XenitAB / gatekeeper-library

Collection of OPA Gatekeeper policies that can be used in your Kubernetes cluster.

XenitAB/gatekeeper-library Issues

Review k8s pod-security-standards to match library
Updated a year ago4
Disable a deployment from being able to update it's service account using noupdateserviceaccount
Updated a year ago
ephemeralContainer mutatingwebhooks
Closed 2 years ago1
k8s 1.23 kubectl debug only allow single type of image
Updated 2 years ago
Ephemeral containers security enforcement
Closed 2 years ago
HPA minReplicas vs PDB minAvailable check
Updated 2 years ago
Review gatekeepr-libary rules vs upstream
Updated 2 years ago
disable rolebinding to default service account
Updated 2 years ago
configuration help aadpodidbinding, in deployment/statefullset
Updated 2 years ago1
Disable automountServiceAccountToken by default
Closed 2 years ago3
set seccompProfile to RuntimeDefault unless defined
Closed 2 years ago
Update name init-container-capabilities to init-container-drop-capabilities
Closed 2 years ago
drop-net-raw don't understand ALL
Closed 2 years ago1
Drop capabilities CAP_SYS_ADMIN or all by default
Closed 2 years ago4
Add pathTests to container-drop-net-raw
Updated 2 years ago
Version 4.X of yq can't be used for "make generate"
Closed 2 years ago1
[Feature] mutations for init containers
Closed 2 years ago1
Switch to gator CLI for testing
Updated 2 years ago1
Add unique ingress path
Closed 3 years ago1
Clean up post hook
Closed 4 years ago
Constraint to limit HelmReleases to only use GitRepository with same name as namespace
Closed 4 years ago
Helm chart crd issues
Closed 4 years ago