-
Notifications
You must be signed in to change notification settings - Fork 128
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add policy annotations to all GKE hardening related polices #180
Comments
@joecheuk we might to define some method for the [control] value related to GKE hardening guidelines or leave it blank |
@dekuhn I recommend not leaving the control value blank, but instead come up with a control name for each guideline. Ex.
|
@morgante @ryanismert @blueandgold - FYI It will be up to the engineer when adding these annotations to determine the text control name e.g. DISABLE_DASHBOARD_UI for each GKE hardening guideline. |
Based on go/policy-bundles - the recommended annotations would look something like:
bundles.validator.forsetisecurity.org/[bundle_key]: [control]
Please add details for all GKE Hardening Policies
Example:
description: Disable the Kubernetes web UI (Dashboard)
bundles.validator.forsetisecurity.org/gke-hardening-guideline:
The text was updated successfully, but these errors were encountered: