Sertaç Özercan

add architecture diagram

1

**Describe the solution you'd like** add an architecture diagram we have a few old ones here: https://docs.google.com/document/d/1Rz1bkZKZSLVMjC_w8WLASPDUjfU80tjV-XWUXZ8vq3I/edit#heading=h.bbpo3iwqk0xy old draw.io diagrams: https://drive.google.com/file/d/1sXrFWtdbWPrPSzT94aXpsXTc0fg-dFnF/view?usp=sharing https://drive.google.com/file/d/1L_wDwU9zKaLuv5qBmoTiYx4NUqForUL-/view?usp=sharing

false positive for CVE-2019-3826

27

## Description Prometheus publishes v2 as v0.x due to Go dependency versioning for using Prometheus as a library https://github.com/prometheus/prometheus#prometheus-code-base Trivy finds vulnerabilities in go.mod dependencies for v0.35. However, this corresponds...

base - libssl1 and libssl1.1 package metadata

3

**Describe the bug** Latest distroless/base (`73deaaf6a207c1a33850257ba74e0f196bc418636cada9943a03d7abea980d6d`) adds `libssl1.1` package metadata to `/var/lib/dpkg/status.d/` File is called `libssl1.1` https://explore.ggcr.dev/layers/gcr.io/distroless/base@sha256:559bc54043fc1429f1b9c4e16f52670c7861b7c7fd4125129c29c924b293c2b2/var/lib/dpkg/status.d/ (latest as of this issue creation) `2758d0c3 -rw-r--r-- 0/0 791 2023-05-26 21:30 libssl1.1`...

**Describe the solution you'd like** today, helmify readme (https://github.com/open-policy-agent/gatekeeper/tree/master/cmd/build/helmify/static) is static and not versioned. When we add or change values, it is not clear what the values correspond with what...

external data provider for Kubernetes API

4

**Describe the solution you'd like** create an external data provider that can talk to kubernetes api server this should address similar scenarios as syncing to opa cache (for example, uniqueness)...

docs: release docs should include tagging frameworks version

3

**Describe the solution you'd like** We should include the process to cut a release branch and tag frameworks as part of release docs

add unit tests for audit

2

**Describe the solution you'd like** looks like we don't have good test coverage there, we should add tests for audit **Anything else you would like to add:** [Miscellaneous information that...

Deprecate control-plane labels

19

**Describe the solution you'd like** [A clear and concise description of what you want to happen.] `control-plane` labels are leftovers from kubebuilder 1.0. They can be deprecated but we should...

**What this PR does / why we need it**: This is a behavior change so we should document this in the release notes. Changes default behavior to remove vulnerable images...