kubewarden-controller

kubewarden-controller copied to clipboard

Move generation of CA to the main reconciliation loop

3

## Is your feature request related to a problem? Currently the kubewarden-controller generates certificates for each Policy Server instance declared by the user. All these certificates are signed by a...

flavio

We're currently using [`controller-runtime`](https://github.com/kubernetes-sigs/controller-runtime) version 0.14.6. When creating the Manager we give to it some configuration Options, see [here](https://github.com/kubewarden/kubewarden-controller/blob/fc6e1e815f87a80cedb737ca625604f5e80557d6/main.go#L135) One of the values of the Manager Options is called [`SyncPeriod`](https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/manager#Options)....

flavio

Feature Request: make cert-manager optional

4

### Is your feature request related to a problem? Currently Kubewarden installation required cert-manager to be installed. cert-manager is used to create the internal certifcate used to secure the communication...

flavio

There are situations when the whole Kubewarden stack must be disabled. This could be because there's an emergency in place and some quick (and maybe non-compliant/insecure) actions have to be...

flavio

Improve the security posture of Kubewarden by implementing the improvements suggested by TAG Security whitepaper about admission controllers These are the pending items to be implemented: * [ ] https://github.com/kubewarden/kubewarden-controller/issues/227...

flavio

CNCF TOC annual review due

8

## Annual review due **Sandbox** projects are subject to an *annual review* by the **TOC**. This is intended to be a lightweight process to ensure that projects are on track,...

clomonitor-bot

Create a DotNet policy template

5

Create a Github template repository for the DotNet policies. This template should, as the Golang template, has the metadata files, basic policy structure to receive the admission review request, basic...

jvanz

### Is your feature request related to a problem? Currently, the installation flow of Kubewarden with tracing and monitoring is quite complicated for the user. As the UI offers the...

dgiebert

Feature Request: do not apply certain policies to selected users/groups/service accounts

4

### Is your feature request related to a problem? This is a feature request, based on a conversation happened on slack. > Hi! that's an interesting question. The user name,...

flavio

- Generate Certificate Authority - Generate certificate for `kubewarden-controller` and sign it with our CA - Start the Kubewarden controller HTTPS server using this certificate - Register the webhook against...

fabriziosestito