issues
search
cruise-automation
/
k-rail
Kubernetes security tool for policy enforcement
Apache License 2.0
444
stars
55
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
[FR] Add policy to enforce unique Istio VirtualServices (like unique Ingress policy)
#83
funkypenguin
opened
4 years ago
3
Fix ShareProcessNamespace check
#82
dustin-decker
closed
4 years ago
0
Pod policy check inconsistencies
#81
js-timbirkett
closed
4 years ago
3
Bug in Namespace Process Sharing
#80
ChrisCooney1
closed
4 years ago
1
add log for issue 78: Include violating image in logs produced by pod…
#79
frenchi
closed
4 years ago
2
Include violating image in logs produced by pod_trusted_repository policy
#78
funkypenguin
closed
3 years ago
2
EmptyDir sizelimits no longer applied via mutation
#77
funkypenguin
opened
4 years ago
2
Revert service port to 443
#76
funkypenguin
closed
4 years ago
1
Add policy to prevent anonymous and unauthed Cluster Role Bindings and Role Bindings
#75
shellw
closed
4 years ago
0
[FR] Make terminationMessagePolicy: FallbackToLogsOnError default
#74
dustin-decker
opened
4 years ago
1
Update chart folder, move examples, update README
#73
dustin-decker
closed
4 years ago
0
Add GH workflow for chart releaser
#72
funkypenguin
closed
4 years ago
1
Fix bug in helm chart when namespace != k-rail
#71
andyspiers
closed
4 years ago
1
Fix readme link
#70
dustin-decker
closed
4 years ago
0
Add no persistent volume host path policy to Readme
#69
shellw
closed
4 years ago
0
Add policy to ensure No Persistent Volume HostPath
#68
shellw
closed
4 years ago
0
Can we use regexs in exemptions?
#67
funkypenguin
closed
4 years ago
2
Add namespace to violation text
#66
shellw
closed
4 years ago
0
New: Add policy for Service type LoadBalancer
#65
bvandewalle
closed
4 years ago
0
Add Unique Ingress Host policy to readme
#64
shellw
closed
4 years ago
0
Add unique ingress host policy
#63
shellw
closed
4 years ago
1
[WIP] smoke test
#62
dustin-decker
opened
4 years ago
1
Fix seccomp policy during exec
#61
dustin-decker
closed
4 years ago
1
exempt_policies pod_no_exec and execute to pod/container fails
#60
curx
closed
4 years ago
5
Typo fix in the README.
#59
jleadford
closed
4 years ago
0
Updates to webhook configuration.
#58
jleadford
closed
4 years ago
0
Drop Go 1.12.x support in CI
#57
alpe
closed
4 years ago
0
[FR] Emergency stop button. Prevent all changes when toggled.
#56
dustin-decker
closed
4 years ago
3
[FR] Rate limiting object creation/modification by type and namespace
#55
dustin-decker
closed
4 years ago
0
Add Evict operator
#54
alpe
opened
4 years ago
6
Fix build time testing
#53
dustin-decker
closed
4 years ago
0
Race tests fail in docker build and are ignored
#52
alpe
closed
4 years ago
2
Helm chart is not helm3-compatible
#51
funkypenguin
closed
4 years ago
11
[FR] Immutable resource policy
#50
dustin-decker
opened
4 years ago
3
[FR] Prevent Ingress host collisions
#49
evilrussianhacker
closed
4 years ago
1
Split Mutation and Validation into seperate webhooks
#48
alpe
opened
4 years ago
2
SPIKE: Operator to evict tainted pods - issue 18
#47
alpe
closed
4 years ago
5
Ensure deployment redeploys if TLS secret changes
#46
dustin-decker
closed
4 years ago
0
TLS handshake remote error: tls: bad certificate
#45
ropwareJB
closed
4 years ago
3
Add a mutate image pull policy
#44
lanluo
closed
4 years ago
2
[FR] Override ImagePullPolicy for configured images
#43
dustin-decker
closed
4 years ago
1
Enforce a label policy on pods
#42
alpe
opened
4 years ago
2
Add metrics - discussion
#41
alpe
opened
4 years ago
3
Add EmptyDir size limit policy
#40
alpe
closed
4 years ago
3
Revisit policy configuration: fail faster
#39
alpe
closed
4 years ago
2
Proposal for caching admission resources decoding
#38
alpe
closed
4 years ago
2
[FR] add node taint toleration to Pods that are targeted by a public ingress
#37
dustin-decker
opened
4 years ago
2
emptyDir without sizelimit approach
#36
jleadford
closed
4 years ago
5
Disallow ShareProcessNamespace.
#35
jleadford
closed
4 years ago
3
Add CI
#34
dustin-decker
closed
4 years ago
0
Previous
Next