-
Notifications
You must be signed in to change notification settings - Fork 572
Add K3s self-security assessment #1500
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Signed-off-by: Orlix <[email protected]>
✅ Deploy Preview for tag-security ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
JustinCappos
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have a few minor requests. It looks good overall. Can you fix these and we'll merge?
Signed-off-by: Brad Davidson <[email protected]>
Update K3s self-assessment based on initial TAG review
|
Hi @JustinCappos all comments are addressed and provided update by @brandond. |
JustinCappos
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One more minor fix ("fully certified" is ???) and I think it's ready to merge.
|
@JustinCappos it looks like you resolved that discussion so I had to go hunting for it - but see #1500 (comment) |
I think this may just be my lack of understanding in the kubernetes landscape. Seems like this should be fine to merge then. |
JustinCappos
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good to merge. Would require a bit of work for a joint assessment, but is in a decent shape.
|
FYI: the linter and spell checking are failing. Can you fix those please? |
|
It looks like we'll need to add some words to the word list; is that acceptable? |
Yes, go ahead! |
@jkjell @evankanderson @mnm678 notifying you in case there is an objection... |
Signed-off-by: Orlix <[email protected]>
Signed-off-by: Orlix <[email protected]>
Signed-off-by: Orlix <[email protected]>
evankanderson
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Still approving, but rewriting the entire extra words dictionary to case insensitive was a little hard to review.
| ], | ||
| "words": [ | ||
| "ABAC", | ||
| "addfetnetgrent", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Where is this "word" used (out of curiosity)?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@evankanderson it's in the original file as well - "addfetnetgrent",
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
search didn't show it anywhere though, happy to remove it :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@evankanderson do you want me to clean this up or we keep it as it was before ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hey @OrlinVasilev, you might want to just bypass this repo and its checks, and put the document directly into it's long-term home instead: https://github.com/cncf/toc/tree/main/projects/k3s
ref: https://github.com/cncf/tag-security/blob/main/.github/pull_request_template.md
|
Now we just need to satisfy the markdown style linter... |
K3s project is getting itself prepared for the Incubation phase. We are completing our first self-assessment.