Genevieve Luyt

Results 21 comments of Genevieve Luyt

Thanks for pointing this out! > Kubernetes reserves all labels and annotations in the kubernetes.io namespace The kubeaudit annotations existed before I started on the project, I had no idea...

Agreed that support for multiple files would be really awesome. We've thought about implementing this before but got kind of stuck choosing the right approach. We could either 1. Include...

Hey @dmitry-irtegov , thanks for bringing this up and providing a detailed example! This sounds like something we definitely want to support

Hey @danishprakash and @Ser87ch , sorry I missed your messages! Been getting too many Dependabot notifications drowning out important ones 😢 . Thank you @Ser87ch for opening a PR, I...

Hi @lukasmrtvy, Thanks for your feature idea! Could you please include a bit more detail. Do you have a specific use case? What problem are you hoping this feature will...

Hey @030 , making kubeaudit available as a snap package would be great! If you'd like to implement this, please modify the [goreleaser configuration](https://goreleaser.com/customization/snapcraft/) such that the package will get...

Why not both? 🙂 If you are interested in contributing, we would be happy to accept this change. EDIT: Actually, since `unconfined` runs apparmor [with no security profile](https://cloud.google.com/container-optimized-os/docs/how-to/secure-apparmor), I think...

If the annotation is going to stop working and the security profile has already been available for some time, I think dropping annotation support is fair. +1 to @dani-santos-code's suggestion...

Based on [these docs](https://kubernetes.io/docs/tutorials/security/seccomp/#enable-the-use-of-runtimedefault-as-the-default-seccomp-profile-for-all-workloads), it sounds like having seccomp enabled is the new default behaviour, so kubeaudit might not even have to check that seccomp is enabled but rather should...

I see. If neither the annotation nor the seccomp profile are set, what does the library return for the profile?