Marc Boorshtein

Istio provides read-only access across namespaces, even when using an authentication method with limited access

26

### Describe the bug When setting up Istio in a multi-tenant environment, I have access to all configurations available to isitio for read-only, even if the token used to authenticate...

Disable login screen when authenticating with an external reverse proxy

5

**Summary** provide a flag that bypasses login when a token is present in the `Authorization` header **Background and rationale** I've integrated KubeApps with OpenUnison's reverse proxy, which injects a token...

Disable update of "top level" objects

4

**Question** Is there a way to disable the policy-controller's rewriting of top level objects' `image` tags to specific digests? For instance if I have the `image: docker.io/mlbiam/openuison-operator:0.0.2` in a `CronJob`,...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of...

Secure access to in-cluster headlamp with a reverse proxy

26

I'd like to integrate HeadLamp into OpenUnison (https://openunison.github.io), but I'm running into a few issues: ***OIDC doesn't support self signed CA*** - Going through the instructions for OIDC ignores trusting...

Support OIDC identities for docker login

3

**Tell us about your request** Currently dockerhub requires a static token or password. These tokens are easily lost and hard to track and replace. It would be much better for...