redhat-cop/rego-policies

Policy to deny pod running with high vulnerabilities

garethahealy opened this issue 4 years ago · 2 comments

garethahealy commented 4 years ago

Investigate if it's possible to hookup the data from the below operator to deny images that are bad:

https://operatorhub.io/operator/project-quay-container-security-operator

garethahealy commented 4 years ago

@sabre1041 ; do you know if there is anything already in the quay ecosystem that would do this already?

garethahealy commented a year ago

can be solved by RHACS (https://www.redhat.com/en/technologies/cloud-computing/openshift/advanced-cluster-security-kubernetes) or another admission controller (https://kyverno.io/policies/other/rec-req/require-vulnerability-scan/require-vulnerability-scan/)