issues
search
open-policy-agent
/
gatekeeper-library
📚 The OPA Gatekeeper policy library
https://open-policy-agent.github.io/gatekeeper-library
Apache License 2.0
617
stars
316
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Could we include `system:authenticated` in the set of disallowed subjects in k8sdisallowanonymous template?
#561
julianKatz
opened
2 days ago
1
chore: bump github/codeql-action from 3.25.10 to 3.25.11 in the all group
#560
dependabot[bot]
closed
3 days ago
0
fix: 1:1 mapping for rego:cel for psp-host-network-ports policy
#559
JaydipGabani
closed
2 days ago
1
chore: bump ws from 7.5.9 to 7.5.10 in /website
#558
dependabot[bot]
closed
1 week ago
0
chore: bump golang from `c2010b9` to `a66eda6` in /build/gomplate
#557
dependabot[bot]
closed
1 week ago
0
K8sPSPHostNetworkingPorts constraint template not handling exemptImages parameter properly
#556
tmyhu
opened
2 weeks ago
5
[RFE] new general policy: whitelist domain names for routes
#555
michaelalang
opened
2 weeks ago
0
[RFE] new general policy: deny-networkpolicy-modifications
#554
michaelalang
opened
2 weeks ago
0
chore: bump braces from 3.0.2 to 3.0.3 in /website
#553
dependabot[bot]
closed
2 weeks ago
0
chore: bump k8s.io/apimachinery from 0.27.14 to 0.27.15 in /scripts/require-sync
#552
dependabot[bot]
closed
2 weeks ago
0
chore: bump the all group across 1 directory with 4 updates
#551
dependabot[bot]
closed
2 weeks ago
1
chore: bump golang from `f43c6f0` to `969349b` in /build/gomplate
#550
dependabot[bot]
closed
2 weeks ago
1
chore: bump the all group with 3 updates
#549
dependabot[bot]
closed
2 weeks ago
1
chore: Upgrade kind to v0.23.0; use k8s 1.30.0 for integration tests
#548
maxsmythe
closed
3 weeks ago
0
chore: adding CEL for psp-host-filesystem
#547
JaydipGabani
opened
4 weeks ago
0
Improve Rego testing for library
#546
JaydipGabani
opened
1 month ago
0
chore: adding CEL for psp-proc-mount policy
#545
JaydipGabani
closed
4 weeks ago
0
chore: adding CEL for psp-host-network-ports policy
#544
JaydipGabani
closed
3 weeks ago
0
chore: adding cel for psp-privileged-containers
#543
JaydipGabani
closed
4 weeks ago
0
chore: adding cel for psp-root-filesystem
#542
JaydipGabani
closed
3 weeks ago
0
Add CEL code for PSP Policies in library
#541
JaydipGabani
closed
3 weeks ago
0
chore: adding cel for psp-seccomp policy
#540
JaydipGabani
opened
1 month ago
0
chore: bump github/codeql-action from 3.25.6 to 3.25.7 in the all group
#539
dependabot[bot]
closed
1 month ago
0
k8sallowedreposv2: Fix Security Bypass for Image Pulling
#538
yakirk
closed
3 weeks ago
9
chore: adding psp-users CEL policy
#537
JaydipGabani
opened
1 month ago
0
Add VAP-CEL to K8sPSPFlexVolumes
#536
maxsmythe
opened
1 month ago
0
Add CEL to K8sPSPCapabilities template
#535
maxsmythe
opened
1 month ago
3
chore: bump step-security/harden-runner from 2.7.1 to 2.8.0 in the all group
#534
dependabot[bot]
closed
1 month ago
0
feat: Update apparmor: add CEL, support securityContext
#533
maxsmythe
opened
1 month ago
9
chore: using anyObject in requiredlablel and ci testing with gk 3.16.3
#532
JaydipGabani
closed
1 month ago
0
`variables.anyObject` should be used for required labels CEL
#531
maxsmythe
closed
1 month ago
0
chore: adding cel for psp/volume and psp/selinux
#530
JaydipGabani
opened
1 month ago
0
k8sallowedrepos: Fix Security Bypass for Image Pulling
#529
yakirk
closed
1 month ago
4
chore: bump the all group with 2 updates
#528
dependabot[bot]
closed
1 month ago
1
chore: bump golang from `b1e05e2` to `f43c6f0` in /build/gomplate
#527
dependabot[bot]
closed
1 month ago
1
chore: bump k8s.io/apimachinery from 0.27.13 to 0.27.14 in /scripts/require-sync
#526
dependabot[bot]
closed
1 month ago
0
chore: bump the all group with 4 updates
#525
dependabot[bot]
closed
1 month ago
1
chore: bump golang from `d5302d4` to `b1e05e2` in /build/gomplate
#524
dependabot[bot]
closed
1 month ago
0
fsgroup cel
#523
ritazh
opened
1 month ago
0
K8sRequiredResources ConstraintTemplate doesn't work properly
#522
rkosyk
closed
1 month ago
1
Forbidden sysctls cel
#521
ritazh
opened
1 month ago
0
chore: bump the all group with 4 updates
#520
dependabot[bot]
closed
1 month ago
0
ci: testing with cel policies
#519
JaydipGabani
closed
1 month ago
4
chore: bump golang from `450e382` to `d5302d4` in /build/gomplate
#518
dependabot[bot]
closed
2 months ago
0
chore: bump github.com/open-policy-agent/gatekeeper/v3 from 3.14.1 to 3.14.2 in /scripts/require-sync
#517
dependabot[bot]
closed
2 months ago
1
chore: bump the all group with 3 updates
#516
dependabot[bot]
closed
2 months ago
0
fix(podDisruptionBudget): do not apply on ReplicaSets
#515
sathieu
closed
4 weeks ago
1
feat(general): Add volumeresources emptyDir sizelimit
#514
dongjiang1989
opened
2 months ago
8
chore: bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /website
#513
dependabot[bot]
closed
2 months ago
1
chore: bump express from 4.18.1 to 4.19.2 in /website
#512
dependabot[bot]
closed
2 months ago
2
Next