53 Commits

Author SHA1 Message Date
swaphb 6e7f5b39fb make falco alerting opt in
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 59s
2026-08-16 21:36:09 -04:00
swaphb 6c79340d9a add environment-specific cilium profiles
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
2026-08-16 20:04:14 -04:00
swaphb 1a372b7eac fix cilium routing and cluster dns
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m0s
2026-08-16 19:41:40 -04:00
swaphb 88e735109f consolidate Flatcar provisioning priorities
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m1s
2026-08-16 14:40:43 -04:00
swaphb 20ff222531 document Terraform to Ansible handoff
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m1s
2026-08-16 14:37:39 -04:00
swaphb 9eca9b49e0 add Proxmox Terraform infrastructure backlog
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m5s
2026-08-16 14:34:05 -04:00
swaphb 664c3c8236 add Ansible Flatcar and platform bootstrap
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 56s
2026-08-15 16:40:37 -04:00
swaphb 478cc49e50 update build status and project roadmap
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 55s
2026-08-15 16:13:42 -04:00
swaphb e312fd3e88 add Flatcar lifecycle management backlog
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m5s
2026-08-15 14:39:03 -04:00
swaphb 5c1e6205a7 document Falco runtime topology
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m0s
2026-08-15 14:22:56 -04:00
swaphb 2ca1b150cc reduce low priority Falco Slack alerts
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m4s
2026-08-15 14:13:53 -04:00
swaphb 4484865bbf add infrastructure automation backlog
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 52s
2026-08-15 13:44:27 -04:00
swaphb 0db746af71 configure Falcosidekick Slack forwarding
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 58s
2026-08-15 13:38:42 -04:00
swaphb 6632c91f9f document Falco alerting secret
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m2s
2026-08-15 13:30:14 -04:00
swaphb 68dc427a73 update project progress documentation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
2026-08-15 13:26:34 -04:00
swaphb fc53e16dd4 organize deployment configuration
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m6s
2026-08-15 13:17:46 -04:00
swaphb 12f3276465 replace immutable test pods during Argo sync
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 57s
2026-08-14 22:26:00 -04:00
swaphb d10018edc1 keep compliant workload free of shell activity
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
2026-08-14 22:23:17 -04:00
swaphb 2506b61ae0 add Kyverno and Falco security test workloads
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m5s
2026-08-14 22:08:52 -04:00
swaphb 2bd22db276 add Flatcar k3d security test host
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m37s
2026-08-14 21:47:10 -04:00
swaphb e79045712d wait for K3s API readiness in CI
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 2m33s
2026-08-11 19:17:45 -04:00
swaphb c272dd4581 support kube-bench artifacts on Gitea Actions
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 7m5s
2026-08-11 19:07:21 -04:00
swaphb 5ddb0f2fef install jq for kube-bench report parsing
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 1m37s
2026-08-11 19:04:00 -04:00
swaphb 3b1ca2a468 emit clean kube-bench JSON report
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 1m21s
2026-08-11 19:00:11 -04:00
swaphb 992f2e2b07 fix kube-bench JSON extraction
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 2m19s
2026-08-11 17:51:06 -04:00
swaphb f7fb479631 normalize kube-bench output before validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 2m45s
2026-08-11 17:45:29 -04:00
swaphb 3256a0b93b adapt kube-bench scan for containerized k3d
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m32s
2026-08-11 17:35:00 -04:00
swaphb 78504c7378 preserve TLS verification for k3d runner endpoint
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 2m52s
2026-08-11 17:16:26 -04:00
swaphb 048575fa18 resolve k3d API through runner network gateway
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 1m14s
2026-08-11 17:04:27 -04:00
swaphb c0a6c050b5 fix k3d kubeconfig for Docker runner
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 55s
2026-08-11 17:00:44 -04:00
swaphb 22ccecc363 fix ephemeral k3d cluster cleanup
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 30s
2026-08-11 16:55:16 -04:00
swaphb 4c1864587f install kubectl in kube-bench workflow
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 13s
2026-08-11 16:54:07 -04:00
swaphb 97320318f4 fix Proxmox snippet storage detection
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m28s
2026-08-11 16:49:04 -04:00
swaphb 2a9d312326 add Flatcar Proxmox Gitea runner bootstrap
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-11 16:26:09 -04:00
swaphb 51dff6d515 make falco custom rules self contained
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:54:56 -04:00
swaphb 797e9efc15 fix falco rules configmap key
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m13s
2026-08-10 21:51:17 -04:00
swaphb caebc122e3 fix falco rules configmap namespace
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:47:21 -04:00
swaphb 15570310ed add falco operator plugin and custom rules
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:22:55 -04:00
swaphb caedb9ab8d migrate falco deployment to operator
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:14:38 -04:00
swaphb f183d7f8dc document default namespace policy scope
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 18:02:40 -04:00
swaphb e389331a07 block application resources in default namespace
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 18:01:00 -04:00
swaphb 1c1e9dc394 upgrade falco helm chart to 9.1.0
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 17:51:55 -04:00
swaphb 0e3e2d89f3 upgrade kyverno and fix policy validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 17:42:09 -04:00
swaphb b890d131a6 fix kyverno boolean and resource validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:41:55 -04:00
swaphb ff033f2fcb Add Kyverno admission policies and CIS mappings
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:34:45 -04:00
swaphb fc786ec63c Add Flatcar and Cilium kube-proxy-free architecture
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:19:18 -04:00
swaphb 8934ea95a4 Use lightweight cluster topology in CI
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-09 22:01:11 -04:00
swaphb 8955ba6873 Add CI
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 7m19s
2026-08-09 21:46:33 -04:00
swaphb a49903fbe8 Apply Kyverno CRDs server-side 2026-08-09 20:16:38 -04:00
swaphb 909fbda30d Use replacement sync for Kyverno CRDs 2026-08-09 20:03:41 -04:00