gardener / gardener-extension-shoot-lakom-service

A k8s admission controller verifying pods are using signed images (cosign signatures) and a gardener extension to install it for shoots and seeds.

gardener/gardener-extension-shoot-lakom-service Issues

Support HTTP oci registries
Closed 16 days ago1
Rework unit tests to not rely on external resources
Updated 17 days ago1
Verify helm charts stored in OCI registry
Updated 18 days ago
When Ignore Operation Annotation is enabled, changes to the spec of the Extension resource does not trigger a reconciliation
Updated 2 months ago
Scrape proper metrics and implement monitoring dashboards
Updated 2 months ago
Disable TUF initialization
Updated 2 months ago
Running lakom admission instances cannot admit pod after configuring network policy disallowing traffic to infrastructure metadata service
Closed 5 months ago2
Metrics from the lakom Pods running in the kube-system Namespace are not collected
Updated 8 months ago1
Admission webhook caches false resuts?
Updated 8 months ago4
Add option to disable node identity based authentication to OCI registry
Closed 9 months ago
Keychain to ignore non-existing secrets
Closed 10 months ago