Rita Zhang

icon indicating a website link https://ritazh.com

icon company Microsoft icon location San Francisco icon location Kubernetes SIG Auth co-chair | Kubernetes Security Response Committee | Maintainer of Secrets Store CSI Driver | Maintainer of OPA Gatekeeper

Results 273 comments of Rita Zhang

[govulncheck] Generate VEX documents from `govulncheck` output

Thanks @joelsmith! From all SRC members I talked to, everyone was ok with: > SRC: Should we start publishing VEX? Would be good to get explicit 👍 from @kubernetes/security-response-committee regarding:...

[govulncheck] Generate VEX documents from `govulncheck` output

/remove-lifecycle stale

private-distributors-list: add DaoCloud

+1 @ritazh (Microsoft)

fix: Move K8scel driver from framework

> is k8scel driver going to be removed from frameworks after these changes are in GK? Ideally this PR should test against a PR in framework that removes the k8scel...

feat: Add status metric to config

Per community call today, closing this so others can continue it later.

fix: only set matchConditions on webhook when not empty

@martijnvdp Thanks for the PR! Gatekeeper helm chart is autogenerated when a release is cut. Please refer to https://open-policy-agent.github.io/gatekeeper/website/docs/help#contributing-to-helm-chart to make the change in the necessary place and run `make...

move emitAdmissionEvents and emitAuditEvents to beta

No major concerns from me to move it to beta.

move emitAdmissionEvents and emitAuditEvents to beta

@maxsmythe @sozercan wdyt?

Add ability to set labels on Deployment

It got closed due to staleness. For anyone who is interested in adding this, PTAL how pod labels were add for inspiration: https://github.com/open-policy-agent/gatekeeper/pull/3378/files

Rego v1 and Regal compliance

Please update the constraint template to opt-in to rego v1 by explicitly adding: ```yaml targets: - target: admission.k8s.gatekeeper.sh code: - engine: Rego source: version: v1 rego: | ```