issues
search
cruise-automation
/
k-rail
Kubernetes security tool for policy enforcement
Apache License 2.0
445
stars
62
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Update README.md and CONTRIBUTING.md to include the deprecation notice
#137
mark-adams
closed
1 year ago
0
Helm Install: no matches for kind "PodDisruptionBudget" in version "policy/v1beta1"
#136
harpaldhillon
opened
1 year ago
1
feat: dependabot workflow automation for updating dependency
#135
Rajpratik71
opened
1 year ago
1
Add option to customize pod/containerSecurityContext
#134
funkypenguin
opened
1 year ago
1
Add cli tool to check manifests
#133
syndicut
opened
2 years ago
1
exemptions on container level
#132
empinator
opened
2 years ago
2
Fix example plugin bug
#131
t-kusanagi
opened
2 years ago
1
Stopped collection of mutations on DELETE operations
#130
Kaezon
opened
2 years ago
3
"runAsNonRoot: true" should be in Pod and Container SecurityContexts
#129
hikkyXII
opened
2 years ago
5
Support all ingress versions
#128
max0ne
closed
2 years ago
0
prep for v3.6.0 release
#127
dkiser
closed
2 years ago
0
Add disallow nginx snippet policy
#126
max0ne
closed
2 years ago
0
test2
#125
vinayagg
closed
2 years ago
0
Test1
#124
vinayagg
closed
2 years ago
0
Exemptions do not cover DaemonSets
#123
Kaezon
closed
2 years ago
1
Unable to delete pod
#122
chilu49
opened
2 years ago
10
Include Istio virtualservices in MutatingWebhookConfiguration
#121
somethingnew2-0
closed
2 years ago
1
Filter out Istio Virtual Services from Admission Requests correctly
#120
somethingnew2-0
closed
3 years ago
0
Policy to require Istio VirtualService Gateways
#119
somethingnew2-0
closed
3 years ago
0
Fix AppArmor violationText which was mistakenly reusing Empty Dir violationText
#118
somethingnew2-0
closed
3 years ago
0
helm install --debug k-rail k-rail/k-rail --namespace k-rail fails
#117
csgyuri
closed
3 years ago
2
Added policy to block running as the root user
#116
djcass44
closed
3 years ago
1
adding helm value docs to resolve #114
#115
dkiser
closed
3 years ago
0
Question: how to change the values.yaml file?
#114
maartenvdezz
closed
3 years ago
0
Follow-up to #112, better error message when requiring load balancer annotations
#113
somethingnew2-0
closed
3 years ago
0
Allow multiple load balancer annotations to be required
#112
somethingnew2-0
closed
3 years ago
1
Bump Helm chart to v3.3.1
#111
somethingnew2-0
closed
3 years ago
0
policy executions with labels in prom metrics
#106
nictrix
closed
3 years ago
0
Bump helm chart version to 3.3.0
#105
somethingnew2-0
closed
3 years ago
0
add prometheus metrics and http middleware
#104
nictrix
closed
3 years ago
0
Bump Go version in go.mod
#103
somethingnew2-0
closed
3 years ago
0
Release v3 version of the k-rail module
#102
somethingnew2-0
closed
3 years ago
0
Fix Docker build by including protoc
#101
somethingnew2-0
closed
3 years ago
0
Add Policy Plugins for Custom K-Rail Policies
#100
somethingnew2-0
closed
3 years ago
3
Release v3.1.0 of the chart
#99
dustin-decker
closed
3 years ago
0
add CRD protect policy
#98
wilreichert
closed
3 years ago
0
Add SAN to the helm generated cert
#97
dustin-decker
closed
3 years ago
0
Add note on resource name globbing
#96
dustin-decker
closed
3 years ago
0
Add Deny Unconfined AppArmor policy
#95
dustin-decker
closed
3 years ago
0
Exemptions and Fuzzy Matching - Possible Bug
#94
ossie-git
closed
3 years ago
1
k-rail Webhook Fails Due to TLS SANs Issue + Temporary Workaround
#93
ossie-git
closed
3 years ago
1
Upgrade kubernetes packages to 1.18
#92
Ramyak
closed
3 years ago
2
Add Service No External IP policy for CVE-2020-8554
#91
dustin-decker
closed
3 years ago
0
Add customizable timeout
#90
funkypenguin
closed
3 years ago
0
Upgrade to admissionv1
#89
dustin-decker
closed
3 years ago
0
Update RBAC for PDB policy
#88
dustin-decker
closed
3 years ago
0
Support cluster exemptions
#87
dustin-decker
closed
3 years ago
0
Update deprecated api group admissionregistration.k8s.io/v1beta1
#86
daftping
closed
3 years ago
1
[Question] Is there a way to enforce only matching resources on a set of nodes?
#85
js-timbirkett
opened
3 years ago
3
add invalid poddisruptionbudget policy
#84
wilreichert
closed
3 years ago
0
Next