Add information about the least-privilege policies needed

GSA-TTS / datagov-brokerpak-eks

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)

Other

9 stars 7 forks source link

Add information about the least-privilege policies needed #51

Closed mogul closed 2 years ago

mogul commented 3 years ago

Relates to https://github.com/GSA/datagov-ssb/issues/14

jbrown-xentity commented 3 years ago

Snyk was way out of date on the files it was scanning, it had to be updated (already done). Pushing a blank commit will probably get the snyk check to run. I found that there are some medium vulnerabilities with the 2048 file, can we just remove it @mogul?

mogul commented 3 years ago

I'd rather fix it... It's a good fixture because it is a canary on API support in the newer versions of Kubernetes, and because it acts as a full end-to-end integration test (ingress, TLS, DNS, etc).

I'll make a PR later, but there's no rush since the PR is otherwise just adding docs; no compliance work is gated by it being merged.