cruise-automation/k-rail

Issues

• [FR] add tainted annotation to Pods that have been execed into

  #9 opened 5 years ago by dustin-decker
  6

• [FR] webhook for enforced violations

  #16 opened 5 years ago by dustin-decker
  1

• [FR] evict tainted pods after period

  #18 opened 5 years ago by dustin-decker
  4

• [FR] add node taint toleration to Pods that are targeted by a public ingress

  #37 opened 4 years ago by dustin-decker
  2

• Add metrics - discussion

  #41 opened 4 years ago by alpe
  3

• Enforce a label policy on pods

  #42 opened 4 years ago by alpe
  2

• Split Mutation and Validation into seperate webhooks

  #48 opened 4 years ago by alpe
  2

• [FR] Immutable resource policy

  #50 opened 4 years ago by dustin-decker
  3

• [FR] Make terminationMessagePolicy: FallbackToLogsOnError default

  #74 opened 4 years ago by dustin-decker
  1

• EmptyDir sizelimits no longer applied via mutation

  #77 opened 4 years ago by funkypenguin
  2

• [FR] Add policy to enforce unique Istio VirtualServices (like unique Ingress policy)

  #83 opened 4 years ago by funkypenguin
  3

• [Question] Is there a way to enforce only matching resources on a set of nodes?

  #85 opened 4 years ago by js-timbirkett
  3

• Unable to delete pod

  #122 opened 3 years ago by chilu49
  10

• "runAsNonRoot: true" should be in Pod and Container SecurityContexts

  #129 opened 3 years ago by hikkyXII
  5

• exemptions on container level

  #132 opened 2 years ago by empinator
  2

• Helm Install: no matches for kind "PodDisruptionBudget" in version "policy/v1beta1"

  #136 opened a year ago by harpaldhillon
  1

• Exemptions do not cover DaemonSets

  #123 opened 3 years ago by Kaezon
  1

• helm install --debug k-rail k-rail/k-rail --namespace k-rail fails

  #117 opened 3 years ago by csgyuri
  2

• Question: how to change the values.yaml file?

  #114 opened 3 years ago by maartenvdezz
  0

• Include violating image in logs produced by pod_trusted_repository policy

  #78 opened 3 years ago by funkypenguin
  2

• Update deprecated api group admissionregistration.k8s.io/v1beta1

  #86 opened 3 years ago by daftping
  1

• k-rail Webhook Fails Due to TLS SANs Issue + Temporary Workaround

  #93 opened 3 years ago by ossie-git
  1

• Exemptions and Fuzzy Matching - Possible Bug

  #94 opened 3 years ago by ossie-git
  1

• Pod policy check inconsistencies

  #81 opened 4 years ago by js-timbirkett
  3

• Bug in Namespace Process Sharing

  #80 opened 4 years ago by ChrisCooney1
  1

• Helm chart is not helm3-compatible

  #51 opened 4 years ago by funkypenguin
  11

• Upload helm charts to a repo?

  #2 opened 4 years ago by drnic
  3

• Can we use regexs in exemptions?

  #67 opened 4 years ago by funkypenguin
  2

• [FR] Prevent Ingress host collisions

  #49 opened 4 years ago by evilrussianhacker
  1

• exempt_policies pod_no_exec and execute to pod/container fails

  #60 opened 4 years ago by curx
  5

• [FR] Emergency stop button. Prevent all changes when toggled.

  #56 opened 4 years ago by dustin-decker
  3

• [FR] Rate limiting object creation/modification by type and namespace

  #55 opened 4 years ago by dustin-decker
  0

• Race tests fail in docker build and are ignored

  #52 opened 4 years ago by alpe
  2

• TLS handshake remote error: tls: bad certificate

  #45 opened 4 years ago by ropwareJB
  3

• [FR] Override ImagePullPolicy for configured images

  #43 opened 4 years ago by dustin-decker
  1

• emptyDir without sizelimit approach

  #36 opened 4 years ago by jleadford
  5

• Revisit policy configuration: fail faster

  #39 opened 4 years ago by alpe
  2

• v1.1 crashes on log_level: info

  #31 opened 5 years ago by funkypenguin
  3

• Creating an exemption for a daemonset produces logs with an empty resource

  #23 opened 5 years ago by funkypenguin
  9

• Exceptions for daemonsets still fail with null resource name

  #30 opened 5 years ago by funkypenguin
  1

• [FR] add Seccomp annotation mutation policy

  #15 opened 5 years ago by dustin-decker
  0

• [FR] No Pod Exec policy

  #8 opened 5 years ago by dustin-decker
  0

• Should I expect k-rail to stop tiller being installed?

  #4 opened 5 years ago by drnic
  3