Olle Larsson
Olle Larsson
https://opensearch.org/docs/latest/security-plugin/audit-logs/index/ DOD, internal audit logging for opensearch can be disabled.
**Is your feature request related to a problem? Please describe.** We have enabled system indices in opensearch, see [here](https://github.com/elastisys/compliantkubernetes-apps/blob/main/helmfile/values/opensearch/common.yaml.gotmpl#L58-L72). The official documentation for system indices is found [here](https://github.com/opensearch-project/security/blob/main/securityconfig/opensearch.yml.example#L228-L233). From the...
**Describe the bug** We should update this [page](https://elastisys.io/compliantkubernetes/user-guide/network-model/) (?) with information about a list of weaknesses such as the [cross-namespace forwarding exploit](https://github.com/kubernetes/kubernetes/issues/103675). **Screenshots** **Additional context**
**Describe the bug** **Screenshots** **Additional context**
Add SBOM
> [!warning] > **This is a public repository, ensure not to disclose:** > > - [x] personal data beyond what is necessary for interacting with this pull request, nor >...
### Proposed feature We have added an ingress for ingress-nginx health [here](https://github.com/elastisys/compliantkubernetes-apps/pull/1896) but we do not have a probe for it in either sc or wc. We should create a...
### Current behaviour In the kube-prometheus-stack the alerts come with a proper link to the correct runbook for the alert, base url is [here](https://runbooks.prometheus-operator.dev/). When we moved those alerts we...
**What should be investigated.** We would like to investigate how much (more) resources it is required to run a HA Harbor setup. This HA Harbor setup includes at least two...
**Is your feature request related to a problem? Please describe.** We have this [epic](https://github.com/elastisys/compliantkubernetes-apps/issues/1818) for defining what metrics we should keep in ck8s. In the mean time while it is...
**What should be investigated.** As a part of being able to define what metrics we offer in the platform we first need a good way of collecting them. I see...