Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Guardrails policies (M1) #2970

Merged
merged 38 commits into from
Jul 18, 2023
Merged

Guardrails policies (M1) #2970

merged 38 commits into from
Jul 18, 2023

Commits on Mar 8, 2023

  1. Revert "temporarily remove policies other than the machine one as the… 

    … example and test policy to create a base code pr"

This reverts commit 08d377d.
    @yjst2012
    yjst2012 committed Mar 8, 2023
    Configuration menu
    Copy the full SHA
    07b2288 View commit details
    Browse the repository at this point in the history

  2. extracted shared rego resources to a separate lib

    @yjst2012
    yjst2012 committed Mar 8, 2023
    Configuration menu
    Copy the full SHA
    435fbae View commit details
    Browse the repository at this point in the history

Commits on Mar 9, 2023

  1. improvement: rego unit test and gator test polishing (#2767) 

    * rego unit test and gator test polishing
* lint fix
* rego lint fix
    @ArrisLee
    ArrisLee authored Mar 9, 2023
    Configuration menu
    Copy the full SHA
    154a962 View commit details
    Browse the repository at this point in the history

Commits on Apr 13, 2023

  1. adjusted user id related judgement plus match kinds for resources oth… 

    …er than pod
    @yjst2012
    yjst2012 committed Apr 13, 2023
    Configuration menu
    Copy the full SHA
    3b4ee3d View commit details
    Browse the repository at this point in the history

Commits on Apr 14, 2023

  1. added test cases for priv'd ns to cover pull-secret deletion

    @yjst2012
    yjst2012 committed Apr 14, 2023
    Configuration menu
    Copy the full SHA
    7a3c4f4 View commit details
    Browse the repository at this point in the history

Commits on Apr 27, 2023

  1. add new policy for machine config modification (#2879) 

    * add new policy for machine config modification
* reformat yaml
* revise api group logic
    @ArrisLee
    ArrisLee authored Apr 27, 2023
    Configuration menu
    Copy the full SHA
    dedc483 View commit details
    Browse the repository at this point in the history

Commits on Apr 28, 2023

  1. added pod host path policy

    @yjst2012
    yjst2012 committed Apr 28, 2023
    Configuration menu
    Copy the full SHA
    e23fb7c View commit details
    Browse the repository at this point in the history

  2. dont run guardrails if a standard gatekeeper instance is already started

    @yjst2012
    yjst2012 committed Apr 28, 2023
    Configuration menu
    Copy the full SHA
    47915df View commit details
    Browse the repository at this point in the history

Commits on May 8, 2023

  1. comment out corresponding gator tests as r/w PV check is temporarily … 

    …removed
    @yjst2012
    yjst2012 committed May 8, 2023
    Configuration menu
    Copy the full SHA
    793ff81 View commit details
    Browse the repository at this point in the history

  2. satisfy mega linter

    @yjst2012
    yjst2012 committed May 8, 2023
    Configuration menu
    Copy the full SHA
    e9650f6 View commit details
    Browse the repository at this point in the history

Commits on May 9, 2023

  1. temporarily backoff the standard gatekeeper check

    @yjst2012
    yjst2012 committed May 9, 2023
    Configuration menu
    Copy the full SHA
    c946693 View commit details
    Browse the repository at this point in the history

  2. enable standard gatekeeper check with proper test case modifications

    @yjst2012
    yjst2012 committed May 9, 2023
    Configuration menu
    Copy the full SHA
    f1a8910 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2023

  1. Merge branch 'feature/guardrails' into feature/guardrails-policy

    @yjst2012
    yjst2012 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    b7f2e18 View commit details
    Browse the repository at this point in the history

  2. comment out non-namespaced resources

    @yjst2012
    yjst2012 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    719c7cc View commit details
    Browse the repository at this point in the history

Commits on May 17, 2023

  1. add k8s specific namespaces to the priv'd list

    @yjst2012
    yjst2012 committed May 17, 2023
    Configuration menu
    Copy the full SHA
    be66711 View commit details
    Browse the repository at this point in the history

Commits on May 19, 2023

  1. update README plus add two SA to allowed list

    @yjst2012
    yjst2012 committed May 19, 2023
    Configuration menu
    Copy the full SHA
    0ef9435 View commit details
    Browse the repository at this point in the history

Commits on May 26, 2023

  1. update Guardrails README

    @yjst2012
    yjst2012 committed May 26, 2023
    Configuration menu
    Copy the full SHA
    6c0f4c8 View commit details
    Browse the repository at this point in the history

Commits on May 31, 2023

  1. Merge branch 'master' into feature/guardrails-policy

    @yjst2012
    yjst2012 committed May 31, 2023
    Configuration menu
    Copy the full SHA
    d811129 View commit details
    Browse the repository at this point in the history

  2. a typo in README

    @yjst2012
    yjst2012 committed May 31, 2023
    Configuration menu
    Copy the full SHA
    f1fd83f View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2023

  1. allow policies to enforce on openshift-azure-guardrails namespace

    @yjst2012
    yjst2012 committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    50dabea View commit details
    Browse the repository at this point in the history

  2. added group support for user validation

    @yjst2012
    yjst2012 committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    e7b6b9b View commit details
    Browse the repository at this point in the history

Commits on Jun 9, 2023

  1. update: Guardrail policy scripts and doc updates (#2941) 

    * update generate.sh to support single dir gen
* update scripts to support params
* update README
    @ArrisLee
    ArrisLee authored Jun 9, 2023
    Configuration menu
    Copy the full SHA
    1f136e7 View commit details
    Browse the repository at this point in the history

  2. added usage print for scripts

    @yjst2012
    yjst2012 committed Jun 9, 2023
    Configuration menu
    Copy the full SHA
    5b179c9 View commit details
    Browse the repository at this point in the history

  3. change to flexible mode for username, group and SA name validation

    @yjst2012
    yjst2012 committed Jun 9, 2023
    Configuration menu
    Copy the full SHA
    93fdbd9 View commit details
    Browse the repository at this point in the history

Commits on Jun 19, 2023

  1. update get func to print more debug info

    @yjst2012
    yjst2012 committed Jun 19, 2023
    Configuration menu
    Copy the full SHA
    828058d View commit details
    Browse the repository at this point in the history

Commits on Jun 20, 2023

  1. rely solely on userInfo for user authentication

    @yjst2012
    yjst2012 committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    299a0e5 View commit details
    Browse the repository at this point in the history

  2. extend audit-interval to slow down the audit run, plus display more v… 

    …iolations
    @yjst2012
    yjst2012 committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    fd013b2 View commit details
    Browse the repository at this point in the history

  3. roll back a temp change for local test

    @yjst2012
    yjst2012 committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    7833e2c View commit details
    Browse the repository at this point in the history

  4. dont allow updates for machine and machineset

    @yjst2012
    yjst2012 committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    a72c865 View commit details
    Browse the repository at this point in the history

Commits on Jun 21, 2023

  1. removed MachineSet

    @yjst2012
    yjst2012 committed Jun 21, 2023
    Configuration menu
    Copy the full SHA
    d5ae8f1 View commit details
    Browse the repository at this point in the history

Commits on Jun 23, 2023

  1. unified the constraint filename and resource name to make the config … 

    …easier
    @yjst2012
    yjst2012 committed Jun 23, 2023
    Configuration menu
    Copy the full SHA
    2c3bc0a View commit details
    Browse the repository at this point in the history

  2. adjust constraint and template name and kind as per convention

    @yjst2012
    yjst2012 committed Jun 23, 2023
    Configuration menu
    Copy the full SHA
    ef74a64 View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2023

  1. update gatekeeper params, affinity and tolerations

    @yjst2012
    yjst2012 committed Jul 3, 2023
    Configuration menu
    Copy the full SHA
    71703bd View commit details
    Browse the repository at this point in the history

Commits on Jul 4, 2023

  1. log violations

    @yjst2012
    yjst2012 committed Jul 4, 2023
    Configuration menu
    Copy the full SHA
    810c14f View commit details
    Browse the repository at this point in the history

  2. white list more user and group

    @yjst2012
    yjst2012 committed Jul 4, 2023
    Configuration menu
    Copy the full SHA
    90db317 View commit details
    Browse the repository at this point in the history

Commits on Jul 6, 2023

  1. extend priv'd ns protection to ns itself

    @yjst2012
    yjst2012 committed Jul 6, 2023
    Configuration menu
    Copy the full SHA
    5761127 View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2023

  1. add guardrails policy generate entry in makefile

    @yjst2012
    yjst2012 committed Jul 7, 2023
    Configuration menu
    Copy the full SHA
    fd88b39 View commit details
    Browse the repository at this point in the history

Commits on Jul 18, 2023

  1. make gator in README lower cased to keep consistent with official doc

    @yjst2012
    yjst2012 committed Jul 18, 2023
    Configuration menu
    Copy the full SHA
    2bcbb42 View commit details
    Browse the repository at this point in the history