panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add validating admission policy to restrict upstream driver access (#482)

Browse Source 
* Add validating admission policy to restrict upstream driver access

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/templates/policy.yaml

Signed-off-by: kfox1111 <[email protected]>

* Fix logic

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade helm

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Upgrade kind and fix node version

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Add version info

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix kind version

Signed-off-by: Kevin Fox <[email protected]>

* Fix detection

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing...

Signed-off-by: Kevin Fox <[email protected]>

* Just for testing

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Fix policy

Signed-off-by: Kevin Fox <[email protected]>

* Incorperate feedback

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spiffe-csi-driver/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

* Update docs

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
This commit is contained in:
kfox1111
2024-10-26 07:40:29 -07:00
committed by GitHub
co-authored by Faisal Memon
parent a7368eee1f
commit a360646842
9 changed files with 144 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/nested-full/run-tests.sh
+3 -1
View File
@@ -71,7 +71,9 @@ kubectl rollout status -n kube-system -w --timeout=1m deploy/coredns
for cluster in child other; do
KC="${SCRIPTPATH}/kubeconfig-${cluster}"
kind create cluster --name "${cluster}" --kubeconfig "${SCRIPTPATH}/kubeconfig-${cluster}" --config "${SCRIPTPATH}/.test-files/${cluster}-kind-config.yaml"
kind create cluster --name "${cluster}" --kubeconfig "${SCRIPTPATH}/kubeconfig-${cluster}" --config "${SCRIPTPATH}/.test-files/${cluster}-kind-config.yaml" --image "kindest/node:${K8S}"
kubectl version --kubeconfig "${SCRIPTPATH}/kubeconfig-${cluster}"
md5sum "${KC}"
wc -l "${KC}"