kubewarden-controller

kubewarden-controller copied to clipboard

New policy: block removal of CRDs as long as CRDs are still in use

3

### Is your feature request related to a problem? When uninstalling / re-installing applications that deliver CRDs - the uninstall of these application automatically removes all instances as well which...

Martin-Weiss

Feature Request: New Policy to enforce a set Liveness and/or Readiness Probe

2

### Is your feature request related to a problem? No, Just a suggestion for a new Policy. ### Solution you'd like It would be useful for us for a policy...

TechDufus

### Is your feature request related to a problem? When ever we use an on-premise registry we have to modify the helm values for all helm charts to fetch the...

Martin-Weiss

Refactor the `internal/pkg/admissionregistration` package

2

The `/internal/pkg/admissionregistration` package is used by the controller to generate the CA and certificates. But it has a misleading name and the tests for it is minimal. I think we...

jvanz

Reach close to 70% test coverage for the `internal` package

3

We have a goal to reach 70% of code coverage in the kubewarden controller repository. For that, we can improve the coverage of the `internal` package. The first package that...

jvanz

Increase the code coverage for the controllers package files to 70%

2

We have a goal to reach 70% of code coverage in the kubewarden controller repository. For that, we can improve the coverage of the `controllers` package. Considering the current metric...

jvanz

Reach close to 70% code coverage in the `pkg` package

1

We have a goal to reach 70% of code coverage in the kubewarden controller repository. For that, we can improve the coverage of the `pkg` package. Considering the current metrics,...

jvanz

https://github.com/kubewarden/rfc/blob/main/rfc/0018-certificate-handling.md#internal-ca-changes The internal CA managed by Kubewarden might be recreated (for example, to avoid its expiration). This is the most disruptive event that can happen, especially once some policies are...

fabriziosestito

### Is your feature request related to a problem? As an operator, I would like to give more context to my users when an operation is rejected by a Kubewarden...

flavio

### Description This policy disallows the usage of the `bind`, `impersonate`, `escalate` verbs in Roles and ClusterRoles. These verbs can be used to escalate privileges (`escalate`), bypass RBAC by creating...

viccuad