-
Hi!
I would like to ask for help to understand how the `sbom-tool` works for Rust code. We in the [Kubewarden team](https://github.com/kubewarden) are evaluating to use `sbom-tool` to generate the …
jvanz updated
8 months ago
-
We have a user that is requesting a policy to validate pod resource limits. We cannot use the [Gatekeeper policy](https://artifacthub.io/packages/gatekeeper/gatekeeper-policies/k8scontainerlimits) for…
jvanz updated
8 months ago
-
-
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Current Behavior
The policy attempted to mutate the request, but it is currently configured to not allow…
-
Check all published policies `spec.rules` for inconsistencies.
Some policies have `spec.rules` items that are wrong, as they have . See here [one example](https://github.com/kubewarden/capabilities-p…
-
Currently the webhook tests are written as integration tests, but we think they could be rewritten as unit tests. Integration tests are more expensive than unit tests.
## Acceptance criteria
* [x] I…
-
### Is your feature request related to a problem?
This is a feature part of [this epic](https://github.com/kubewarden/kubewarden-controller/issues/564)
### Solution you'd like
Users must be allowed…
-
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Current Behavior
> **Warning:** I'm opening the issue here, but the problem is actually inside of the [k8s-obj…
-
Before moving ahead with the decision, the engineering team has to do a spike/research on the difference between OPA Gatekeerp and Kubewarden. The main things to look for are the following
1. Is t…
-
## Description
By default, containers running in the same Pod have dedicated PID namespaces. That means they cannot see each other processes.
It's however possible to disable this isolation feat…