Files

.chainsaw
.github
.hack
argo-cel
argo
aws-cel
aws
best-practices-cel
best-practices
castai
cert-manager
cleanup
consul-cel
consul
external-secret-operator
flux-cel
flux
istio-cel
istio
karpenter
kasten-cel
kasten
kubecost-cel
kubecost
kubeops
kubevirt
linkerd-cel
linkerd
nginx-ingress-cel
nginx-ingress
openshift-cel
openshift
other-cel
- advanced-restrict-image-registries
- allowed-annotations
- allowed-pod-priorities
- block-ephemeral-containers
- check-env-vars
- check-node-for-cve-2022-0185
- check-serviceaccount-secrets
- deny-commands-in-exec-probe
- deny-secret-service-account-token-type
- disallow-all-secrets
- disallow-localhost-services
- disallow-secrets-from-env-vars
- docker-socket-requires-label
- enforce-pod-duration
- enforce-readwriteonce-pod
- ensure-probes-different
- ensure-readonly-hostpath
- exclude-namespaces-dynamically
- forbid-cpu-limits
- imagepullpolicy-always
- ingress-host-match-tls
- limit-containers-per-pod
- limit-hostpath-type-pv
- limit-hostpath-vols
- memory-requests-equal-limits
- metadata-match-regex
- pdb-maxunavailable
- prevent-bare-pods
- prevent-cr8escape
- require-annotations
- require-container-port-names
- require-deployments-have-multiple-replicas
- require-emptydir-requests-limits
- require-image-checksum
- require-ingress-https
- require-non-root-groups
- require-pod-priorityclassname
- require-qos-burstable
- require-qos-guaranteed
- require-storageclass
- restrict-annotations
- restrict-binding-clusteradmin
- restrict-binding-system-groups
- restrict-clusterrole-nodesproxy
- restrict-controlplane-scheduling
- restrict-deprecated-registry
- restrict-edit-for-endpoints
- restrict-escalation-verbs-roles
- restrict-ingress-classes
- restrict-ingress-defaultbackend
- restrict-ingress-wildcard
- restrict-jobs
- restrict-loadbalancer
- restrict-networkpolicy-empty-podselector
- restrict-node-affinity
- restrict-node-label-creation
- restrict-pod-controller-serviceaccount-updates
- restrict-sa-automount-sa-token
- restrict-secret-role-verbs
- restrict-secrets-by-name
- restrict-service-port-range
- restrict-storageclass
- restrict-usergroup-fsgroup-id
- restrict-wildcard-resources
- restrict-wildcard-verbs
- topologyspreadconstraints-policy
other
pod-security-cel
pod-security
psa-cel
psa
psp-migration-cel
psp-migration
tekton-cel
tekton
traefik-cel
traefik
velero-cel
velero
windows-security
.chainsaw.yaml
.gitignore
LICENSE
README.md
artifacthub-repo.yml

other-cel

fix: modify the ingress resource (#1156 )

Sep 9, 2024

4707b3d · Sep 9, 2024

Name	Name	Last commit message	Last commit date
parent directory ..
advanced-restrict-image-registries	advanced-restrict-image-registries	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
allowed-annotations	allowed-annotations	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
allowed-pod-priorities	allowed-pod-priorities	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
block-ephemeral-containers	block-ephemeral-containers	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
check-env-vars	check-env-vars	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
check-node-for-cve-2022-0185	check-node-for-cve-2022-0185	chore: explicitly specify `CREATE` and `UPDATE` operations in CEL pol…	Jul 9, 2024
check-serviceaccount-secrets	check-serviceaccount-secrets	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
deny-commands-in-exec-probe	deny-commands-in-exec-probe	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
deny-secret-service-account-token-type	deny-secret-service-account-token-type	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
disallow-all-secrets	disallow-all-secrets	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
disallow-localhost-services	disallow-localhost-services	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
disallow-secrets-from-env-vars	disallow-secrets-from-env-vars	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
docker-socket-requires-label	docker-socket-requires-label	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
enforce-pod-duration	enforce-pod-duration	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
enforce-readwriteonce-pod	enforce-readwriteonce-pod	chore: explicitly specify `CREATE` and `UPDATE` operations in CEL pol…	Jul 9, 2024
ensure-probes-different	ensure-probes-different	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
ensure-readonly-hostpath	ensure-readonly-hostpath	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
exclude-namespaces-dynamically	exclude-namespaces-dynamically	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
forbid-cpu-limits	forbid-cpu-limits	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
imagepullpolicy-always	imagepullpolicy-always	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
ingress-host-match-tls	ingress-host-match-tls	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
limit-containers-per-pod	limit-containers-per-pod	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
limit-hostpath-type-pv	limit-hostpath-type-pv	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
limit-hostpath-vols	limit-hostpath-vols	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
memory-requests-equal-limits	memory-requests-equal-limits	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
metadata-match-regex	metadata-match-regex	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
pdb-maxunavailable	pdb-maxunavailable	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
prevent-bare-pods	prevent-bare-pods	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
prevent-cr8escape	prevent-cr8escape	fix: modify the ingress resource (#1156 )	Sep 9, 2024
require-annotations	require-annotations	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-container-port-names	require-container-port-names	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-deployments-have-multiple-replicas	require-deployments-have-multiple-replicas	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-emptydir-requests-limits	require-emptydir-requests-limits	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-image-checksum	require-image-checksum	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-ingress-https	require-ingress-https	fix: modify the ingress resource (#1156 )	Sep 9, 2024
require-non-root-groups	require-non-root-groups	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-pod-priorityclassname	require-pod-priorityclassname	fix tests (#1140 )	Aug 28, 2024
require-qos-burstable	require-qos-burstable	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-qos-guaranteed	require-qos-guaranteed	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
require-storageclass	require-storageclass	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-annotations	restrict-annotations	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-binding-clusteradmin	restrict-binding-clusteradmin	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-binding-system-groups	restrict-binding-system-groups	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-clusterrole-nodesproxy	restrict-clusterrole-nodesproxy	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-controlplane-scheduling	restrict-controlplane-scheduling	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-deprecated-registry	restrict-deprecated-registry	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-edit-for-endpoints	restrict-edit-for-endpoints	feat: add other policies in CEL expressions - Part 7 (#974 )	Jul 10, 2024
restrict-escalation-verbs-roles	restrict-escalation-verbs-roles	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-ingress-classes	restrict-ingress-classes	fix: modify the ingress resource (#1156 )	Sep 9, 2024
restrict-ingress-defaultbackend	restrict-ingress-defaultbackend	fix: modify the ingress resource (#1156 )	Sep 9, 2024
restrict-ingress-wildcard	restrict-ingress-wildcard	fix: modify the ingress resource (#1156 )	Sep 9, 2024
restrict-jobs	restrict-jobs	fix tests (#1140 )	Aug 28, 2024
restrict-loadbalancer	restrict-loadbalancer	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-networkpolicy-empty-podselector	restrict-networkpolicy-empty-podselector	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-node-affinity	restrict-node-affinity	fix: modify the ingress resource (#1156 )	Sep 9, 2024
restrict-node-label-creation	restrict-node-label-creation	use optionals in cel (#1112 )	Aug 9, 2024
restrict-pod-controller-serviceaccount-updates	restrict-pod-controller-serviceaccount-updates	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-sa-automount-sa-token	restrict-sa-automount-sa-token	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-secret-role-verbs	restrict-secret-role-verbs	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-secrets-by-name	restrict-secrets-by-name	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-service-port-range	restrict-service-port-range	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-storageclass	restrict-storageclass	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-usergroup-fsgroup-id	restrict-usergroup-fsgroup-id	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-wildcard-resources	restrict-wildcard-resources	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
restrict-wildcard-verbs	restrict-wildcard-verbs	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024
topologyspreadconstraints-policy	topologyspreadconstraints-policy	feat: upgrade policy ready assertion to use conditions (#1148 )	Sep 4, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Files

other-cel

other-cel

Files

other-cel

Directory actions

More options

Directory actions

More options

Latest commit

History

other-cel

Folders and files

parent directory