Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

PAAS improvements #234

Merged
merged 10 commits into from
Jun 2, 2024
Merged

PAAS improvements #234

merged 10 commits into from
Jun 2, 2024

Conversation

treydock
Copy link
Contributor

@treydock treydock commented Apr 30, 2024 •
edited
Loading

  • Force spec.securityContext.runAsNonRoot and spec.containers[].securityContext
  • Validate service account authorized for account at namespace level
  • Add imagePullSecrets value for "osc-registry" if that resource is present
  • Namespace should authorize the DNS records in OSC domains
  • Add annotations to Ingress
  • Add Ingress class for NGINX usage
  • Disallow services of type LoadBalancer, ExternalName and NodePort.
  • Disallow external-dns annotations ref
  • Disallow hostPort usage ref

@treydock
PAAS improvements
81c5e96 
* Force security configs for PAAS pods
* Validate namespace account is valid for service account
@treydock treydock force-pushed the paas-improve branch 2 times, most recently from 61481de to d4c61c5 Compare May 25, 2024 16:38
@treydock treydock marked this pull request as ready for review June 2, 2024 14:45
@treydock treydock merged commit 5af32ef into main Jun 2, 2024
10 checks passed
@treydock treydock deleted the paas-improve branch June 2, 2024 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@treydock