kyma-project / warden

Image authenticity validation made k8s-native

kyma-project/warden Issues

Order CI workflows
Closed 2 months ago
Rework release workflow to include release image build
Updated 2 months ago
Migrate from build prow jobs to the Image Builder GH Workflow
Closed 3 months ago1
WONTFIX: Ensure that configured namespaces are enabled for signature validation out of the box
Closed 4 months ago1
[rl-vulnerability_alerts-1] Violation against OSS Rules of Play
Closed 10 months ago3
[rl-assigned_teams-3] Violation against OSS Rules of Play
Closed 6 months ago1
[rl-vulnerability_alerts-1] Violation against OSS Rules of Play
Closed 6 months ago1
[rl-assigned_teams-2] Violation against OSS Rules of Play
Closed 6 months ago1
Create release workflow broken
Closed 6 months ago
Verify authenticity of the notary service using pre-configured public key
Updated 6 months ago13
Do not use `/common/logging` from kyma repo
Closed 8 months ago
Warden upgrade test
Closed 8 months ago1
Avoid stressing memory by watching arbitrary secrets on the cluster
Closed 8 months ago4
Integration tests are unstable
Closed 8 months ago
Automatic image bumping for warden images
Closed 9 months ago1
Warden release GH action
Closed 9 months ago
Remove irrelevant module template test
Closed 9 months ago
improve image name parsing
Updated 9 months ago
Make warden admission disabled by default and controllable by dedicated override
Closed 10 months ago
Include image which got blocked in the textual error message
Closed 10 months ago
Differentiate between defaultAllowed and additianallyAllowed registries
Closed 10 months ago
[rl-license_file-1] Violation against OSS Rules of Play
Closed 10 months ago
Setting "pending" by the namespace controller sometimes doesn't work as we want
Updated 10 months ago10
[rl-reuse_tool-1] Violation against OSS Rules of Play
Closed a year ago3
[rl-reuse_tool-3] Violation against OSS Rules of Play
Closed a year ago3
[rl-security_policy-1] Violation against OSS Rules of Play
Closed a year ago3
[rl-license_file-1] Violation against OSS Rules of Play
Closed a year ago3
[rl-reuse_tool-2] Violation against OSS Rules of Play
Closed a year ago3
[rl-vulnerability_alerts-1] Violation against OSS Rules of Play
Closed a year ago3
Allow configuring secondary notary service for image signature verification
Closed a year ago10
Test integration with LFM as a post-submit job
Closed a year ago1
Implement warden module CI jobs
Closed a year ago2
Warden admission webhook secret generation compliant with LFM
Closed a year ago
POC : Warden module
Closed a year ago1
[rl-reuse_tool-4] Violation against OSS Rules of Play
Closed a year ago
Warden resources reconciled via dedicated operator
Closed a year ago
Share cache between admission controller and signify operator
Closed a year ago7
Restart operator and admission when configuration change
Closed a year ago4
Force restart of warden workloads upon helm upgrade
Closed a year ago
Endless checking loop when annotation `reject` is already on pod
Closed 2 years ago
Fix verification input status handling in admission webhook
Closed 2 years ago
Warden timeout value configurable per landscape
Closed 2 years ago
Signify Operator should watch namespaces to control when to engage or disable image verification
Closed 2 years ago1
Improve logging in warden
Closed 2 years ago
Timeout handling always reject when external service is not available
Closed 2 years ago
Admission webhook should not come with istio side car
Closed 2 years ago1
Warden reconciliation loop causes DoS to the Notary service for unsigned images
Closed 2 years ago2
Warden admission controller is entering infinite loop if image verification fails
Closed 2 years ago1
Configure CI jobs to run Warden Integration Tests
Closed 2 years ago1
Create validation interface and validate images using Notary service
Closed 2 years ago2