Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: decompose istio oscal #826

Merged
merged 14 commits into from
Oct 17, 2024
Merged

fix: decompose istio oscal #826

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
9bdebee
fix: decompose istio oscal
CloudBeard Sep 25, 2024
43f46c6
Merge branch 'main' into 797-decompose-istio-oscal-into-oscal-and-val…
CloudBeard Sep 25, 2024
742c8e6
swapped source url, double checked generate command reference fix tsw…
CloudBeard Sep 25, 2024
d9c72f1
Merge branch '797-decompose-istio-oscal-into-oscal-and-validations' o…
CloudBeard Sep 25, 2024
a298d1a
stragglers
CloudBeard Sep 25, 2024
c168137
spelling fix
CloudBeard Sep 25, 2024
80acb7e
update lula version
CloudBeard Oct 16, 2024
3f9eeb3
Merge branch 'main' into 797-decompose-istio-oscal-into-oscal-and-val…
CloudBeard Oct 16, 2024
45dc188
change validation promtail to vector
CloudBeard Oct 16, 2024
bc85c94
Merge branch 'main' into 797-decompose-istio-oscal-into-oscal-and-val…
CloudBeard Oct 16, 2024
678a93a
add uds-runtime namespace
CloudBeard Oct 16, 2024
480601d
update threshold
CloudBeard Oct 16, 2024
306d254
reset threshold as control prune to fedramp moderate il4
CloudBeard Oct 17, 2024
231c081
Merge branch 'main' into 797-decompose-istio-oscal-into-oscal-and-val…
CloudBeard Oct 17, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2,085 changes: 331 additions & 1,754 deletions compliance/oscal-assessment-results.yaml
View file
Open in desktop

Large diffs are not rendered by default.

9 changes: 9 additions & 0 deletions compliance/validations/istio/all-namespaces-istio-injected/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
# README.md

**NAME** - all-namespaces-istio-injected

**INPUT** - Collects all namespaces in the Kubernetes cluster.

**POLICY** - Checks that all namespaces are Istio-injected, except for a predefined list of exempted namespaces.

**NOTES** - The exempted namespaces are: `istio-system`, `kube-system`, `default`, `istio-admin-gateway`, `istio-passthrough-gateway`, `istio-tenant-gateway`, `kube-node-lease`, `kube-public`, `uds-crds`, `uds-dev-stack`, `uds-policy-exemptions`, `zarf`.
Loading