gatekeeper

gatekeeper copied to clipboard

feat: adding scopedenforcementactions

2

**What this PR does / why we need it**: **Which issue(s) this PR fixes** *(optional, using `fixes #(, fixes #, ...)` format, will close the issue(s) when the PR gets...

JaydipGabani

doc: Add a page to include all flag information in one place

1

It may be helpful for users to get all the information about available flags, their catagory of use (audit, webhook, mutation) into one consolidated page.

JaydipGabani

feat: llm engine driver

1

**What this PR does / why we need it**: This is a fun new experimental engine we were discussing in the community call. requires https://github.com/open-policy-agent/frameworks/pull/411 to merged in first. see...

sozercan

Bumps golang from `d996c64` to `48b942a`. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

admission webhook "validation.gatekeeper.sh" denied the request

1

Hi Folks, Could anyone please help me on this while i am launching my webserver pod facing this error Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [allow-privilege-escalation] Privilege escalation...

Raghuvarun594

**What steps did you take and what happened:** [A clear and concise description of what the bug is.] this is the gatekeeper pod info, as shown belown, the pod has...

pikehuang

**What this PR does / why we need it**: Update the expansion logic to propagate the `oldObject` and `userInfo` fields from the admission request (along with a few other fields)...

multimac

**Describe the solution you'd like** docker allows us to build and publish images that can target specific microarch levels, such as `linux/amd64/v2`, and `linux/amd64/v3`. these align with https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels today, we...

sozercan

No warning displayed on kubectl apply with enforcementAction warn

3

**What steps did you take and what happened:** - OPA Gatekeeper is installed in the k8s cluster - A constraint has been created - On `enforcementAction: deny`, resource admission is...

globalundo

github action for gator

1

**Describe the solution you'd like** it would be useful to build a GitHub action for gator that can be directly added to pipelines **Anything else you would like to add:**...

sozercan