-
[Actual state]
Currently, when generating a `ClusterAdmissionPolicy` with `kwctl manifest`, the `metadata[].name` value is set to "generated-policy".
Therefore, if we apply the manifest as is, wit…
nunix updated
2 years ago
-
I think perhaps the logic on this if statement is inverted?
https://github.com/kubewarden/seccomp-psp-policy/blob/11cf8d7e14d72a786a3ed19bef0791070e46b73a/src/settings.rs#L27-L29
---
trying to …
-
👋
```
$ kubectl apply -f -
-
## The problem
Now that we moved to rustls, system certificates are ignored by kwctl. Because of that, pushing and pulling from registries using self-signed certificates need some extra hops: all t…
-
```yaml
apiVersion: policies.kubewarden.io/v1alpha2
kind: ClusterAdmissionPolicy
metadata:
name: selinux
spec:
policyServer: default
module: registry://ghcr.io/kubewarden/policies/selinux…
-
When executed the `kwctl policies` command, it is possible to see the following error:
```console
$ ./target/release/kwctl -V
kwctl 0.2…
jvanz updated
2 years ago
-
This is a spin-off of the #4.
@chrisns reported that when using the following configuration:
```bash
kubectl apply -f -
jvanz updated
2 years ago
-
Given this is a PSP replacement, I'm not sure why this additional validation needs to exist?
https://github.com/kubewarden/user-group-psp-policy/blob/e0bcc1f918f26d1790be3cd72993c4f6061ff9fa/src/se…
-
-
Create a new Kubewarden policy that can be used to replace the seccomp official PSP.
Acceptance criteria
--------------------
Implement a validating policy
The policy doesn't take any configur…
jvanz updated
2 years ago