sse-secure-systems / connaisseur

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

https://sse-secure-systems.github.io/connaisseur/

sse-secure-systems/connaisseur Issues

enable redis as optional feature
Closed 16 days ago2
Add keyless support (also with private fulcio/rekor instance)
Updated 16 days ago3
New version of connaisseur 3.4.0 not working in calico cluster
Updated 16 days ago3
Internal error occurred: failed calling webhook "connaisseur-svc.connaisseur.svc": failed to call webhook: Post "https://connaisseur-svc.connaisseur.svc:443/mutate?timeout=30s": EOF
Closed a month ago7
Slow memory leak causing cosign subprocess termination
Closed a month ago12
SSLV3_ALERT_BAD_CERTIFICATE: failed calling webhook "connaisseur-svc.connaisseur.svc":
Closed a month ago8
Connaisseur verifies signature with every helm reconcile even with automaticUnchangedApproval enabled
Closed a month ago6
Streamline config handling
Updated a month ago
Failed calling webhook
Updated 2 months ago1
"RuntimeError: Event loop is closed" error found in connaissuer
Closed 2 months ago20
Feature request: Allow for adding custom labels to the deployment manifest of the helm chart
Closed 2 months ago3
Better support for gitops based approaches
Closed 3 months ago17
Broken policy pattern regex
Closed 3 months ago
Does Connaisseur have caching mechanism that prevents repeat verification of an image?
Closed 3 months ago4
Latency of connaisseur cosign verification is around 2s. Is this normal?
Closed 3 months ago2
Connaisseur fails (500) if rejecting an image due to failure to send alerts
Closed 3 months ago
"successful verification of image" log missing
Updated 3 months ago
Option for HTML escaping of alert messages
Closed 3 months ago2
Policy pattern matching with images missing default repo path
Updated 3 months ago
Connaisseur should early exit from verification when threshold is met
Updated 4 months ago
Add capability to enable hostNetwork
Updated 4 months ago
adapt documentation for GKE firewall rule
Updated 4 months ago
Dependabot updates not for all actions
Updated 4 months ago
Look into OpenPubkey
Updated 4 months ago
error converting YAML to JSON
Closed 6 months ago3
More logging around cosign signature verification
Closed 7 months ago1
Helm chart: Explicitly describe the exposed port
Closed 7 months ago
Frequently seeing RuntimeError: event loop is closed with connaisseur pods
Closed 8 months ago2
A pod with an unsigned image can't be deleted
Closed 8 months ago
Helm Chart: Allow to configure the pod security context
Closed 8 months ago1
deleted
Closed 9 months ago
Connaisseur should stop checking trusted roots after meeting threshold of valid answers
Closed 10 months ago2
cosign use private registries and self-signed certificate get error “ error converting YAML to JSON: yaml “ though helm install
Closed a year ago1
Support Cosign 2.0
Closed a year ago3
Need the ability to add annotations to serviceaccount in helm chart
Closed a year ago
Update Connaisseur logs to JSON format
Closed a year ago1
"hasConfigSecrets" at <not>: wrong number of args for not: want 1 got 0 with auth username and password
Closed a year ago
ArgoCD Detects duplicate resource
Updated a year ago10
Support more digest algorithms
Updated a year ago2
Please cut and release a new version
Closed a year ago2
Check commit messages conform to desired format
Closed a year ago
Wrong filename for Unchaged Approval
Closed a year ago
Tracking issue: CI refactoring
Updated a year ago
Protect GHCR releases
Updated a year ago
Connaisseur prevents downscaling of a previous replicaset during an update of a deployment.
Closed a year ago6
CodeQL job broken
Closed a year ago
Error logs do not contain image information, only pod name
Closed a year ago1
Metrics to identify and peg count key usage and alerts
Updated a year ago1
Develop a plugin for rundeck
Updated 2 years ago
Support for ECR
Closed 2 years ago