fix: decompose istio oscal

defenseunicorns · Sep 25, 2024 · 9bdebee · 9bdebee
1 parent b46f8f0
commit 9bdebee
Show file tree

Hide file tree

Showing 79 changed files with 58,734 additions and 1,270 deletions.
diff --git a/compliance/validations/istio/all-namespaces-istio-injected/README.md b/compliance/validations/istio/all-namespaces-istio-injected/README.md
@@ -0,0 +1,9 @@
+# README.md
+
+**NAME** - all-namespaces-istio-injected
+
+**INPUT** - Collects all namespaces in the Kubernetes cluster.
+
+**POLICY** - Checks that all namespaces are Istio-injected, except for a predefined list of exempted namespaces.
+
+**NOTES** - The exempted namespaces are: `istio-system`, `kube-system`, `default`, `istio-admin-gateway`, `istio-passthrough-gateway`, `istio-tenant-gateway`, `kube-node-lease`, `kube-public`, `uds-crds`, `uds-dev-stack`, `uds-policy-exemptions`, `zarf`.