Comments (10)
@bobcatfish I completely agree with you to have such admission checks generic and not tied to one solution.
between, I've marked the doc public, it should be accessible to everyone now. (doc link)
from experimental.
@lukehinds @nadgowdas It was pointed out to us that this idea is really similar to your work in https://github.com/OpenSecureSupplyChain/tkn-admcontroller
I still need to dig into that repo a bit more, but would love to hear any thoughts / feedback / things to watch out for from your prototyping.
from experimental.
@wlynch I don't think we got to far with that, but I would say borrow what you need. I seem to recall @nadgowdas had a TEP open as well.
Good to see this underway, I will share with the sigstore community to see if others would like to help
from experimental.
thanks for connecting @wlynch. We also had some discussion with Jim Bugwadia from Kyverno to see if such enforcement can be applied through kyverno policies. I had collected some thoughts in this doc: https://docs.google.com/document/d/1r2M9jVcL7fs7Edyzr30fV8pcVhxKUkgSmrFNuTXNKtg/edit?usp=sharing
If you have any thoughts let us know.
from experimental.
sgtm!
@tektoncd/governing-board - need at least one other approval
@nadgowdas is there a group I need to join to get access to the doc?
p.s. re Kyverno, an important requirement for a solution in Tekton would be that it was compatible with mulitple policy engines and that we avoided coupling Tekton to any solution in particular (there has been some discussion around this in TEP-0035 in the conteext of applying security policies as a whole)
from experimental.
sgtm too ! (count this as an approval 😛 )
from experimental.
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale
with a justification.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close
with a justification.
If this issue should be exempted, mark the issue as frozen with /lifecycle frozen
with a justification.
/lifecycle stale
Send feedback to tektoncd/plumbing.
from experimental.
Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten
with a justification.
Rotten issues close after an additional 30d of inactivity.
If this issue is safe to close now please do so with /close
with a justification.
If this issue should be exempted, mark the issue as frozen with /lifecycle frozen
with a justification.
/lifecycle rotten
Send feedback to tektoncd/plumbing.
from experimental.
Rotten issues close after 30d of inactivity.
Reopen the issue with /reopen
with a justification.
Mark the issue as fresh with /remove-lifecycle rotten
with a justification.
If this issue should be exempted, mark the issue as frozen with /lifecycle frozen
with a justification.
/close
Send feedback to tektoncd/plumbing.
from experimental.
@tekton-robot: Closing this issue.
In response to this:
Rotten issues close after 30d of inactivity.
Reopen the issue with/reopen
with a justification.
Mark the issue as fresh with/remove-lifecycle rotten
with a justification.
If this issue should be exempted, mark the issue as frozen with/lifecycle frozen
with a justification./close
Send feedback to tektoncd/plumbing.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from experimental.
Related Issues (20)
- [Cloudevents] Add a roadmap for the cloudevents controller HOT 6
- [cloudevents] Use the cloudevents controller to Tekton triggers HOT 4
- [cloudevents] Controller Integration Roadmap HOT 2
- [pipelines-in-pipelines] Child pipeline is not adhering to timeout values passed from parent pipeline HOT 5
- [cloudevents] Supported Tekton Pipeline Cloudevents format HOT 1
- [Question][github app notifier] How to prevent github API limit throttling? HOT 4
- cloudevents Failed to emit cloud events no cloud events client found HOT 8
- Cleaning up pipeline runs from multiple namespaces HOT 4
- [pipelines-in-pipelines] Add a demo about using results between pipelines HOT 1
- [pipelines-in-pipelines] SIGSEGV in controller if parent PipelineRun is cancelled while child PipelineRun is starting HOT 1
- [trusted-task] Add config for users to determine whether apply verification HOT 1
- [trusted-task] Add e2e test HOT 4
- [trusted task] Verify task and pipeline when apply them HOT 4
- [trusted-task] Support Multiple Keys HOT 4
- Example Problem HOT 4
- Presubmits silently skipped if project does not have a presubmit-tests.sh file HOT 9
- [concurrency] Concurrency controller fails to cancel matching PipelineRuns HOT 9
- [concurrency] Reruns a pipelinerun hang in state PipelineRunPending HOT 4
- can I install commit-status-tracker without building it using Go ? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from experimental.