Commit Graph

28 Commits

Author SHA1 Message Date
swaphb f7fb479631 normalize kube-bench output before validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 2m45s
2026-08-11 17:45:29 -04:00
swaphb 3256a0b93b adapt kube-bench scan for containerized k3d
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m32s
2026-08-11 17:35:00 -04:00
swaphb 78504c7378 preserve TLS verification for k3d runner endpoint
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 2m52s
2026-08-11 17:16:26 -04:00
swaphb 048575fa18 resolve k3d API through runner network gateway
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 1m14s
2026-08-11 17:04:27 -04:00
swaphb c0a6c050b5 fix k3d kubeconfig for Docker runner
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 55s
2026-08-11 17:00:44 -04:00
swaphb 22ccecc363 fix ephemeral k3d cluster cleanup
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 30s
2026-08-11 16:55:16 -04:00
swaphb 4c1864587f install kubectl in kube-bench workflow
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 13s
2026-08-11 16:54:07 -04:00
swaphb 97320318f4 fix Proxmox snippet storage detection
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m28s
2026-08-11 16:49:04 -04:00
swaphb 2a9d312326 add Flatcar Proxmox Gitea runner bootstrap
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-11 16:26:09 -04:00
swaphb 51dff6d515 make falco custom rules self contained
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:54:56 -04:00
swaphb 797e9efc15 fix falco rules configmap key
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m13s
2026-08-10 21:51:17 -04:00
swaphb caebc122e3 fix falco rules configmap namespace
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:47:21 -04:00
swaphb 15570310ed add falco operator plugin and custom rules
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:22:55 -04:00
swaphb caedb9ab8d migrate falco deployment to operator
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 21:14:38 -04:00
swaphb f183d7f8dc document default namespace policy scope
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 18:02:40 -04:00
swaphb e389331a07 block application resources in default namespace
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 18:01:00 -04:00
swaphb 1c1e9dc394 upgrade falco helm chart to 9.1.0
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 17:51:55 -04:00
swaphb 0e3e2d89f3 upgrade kyverno and fix policy validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
2026-08-10 17:42:09 -04:00
swaphb b890d131a6 fix kyverno boolean and resource validation
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:41:55 -04:00
swaphb ff033f2fcb Add Kyverno admission policies and CIS mappings
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:34:45 -04:00
swaphb fc786ec63c Add Flatcar and Cilium kube-proxy-free architecture
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-10 17:19:18 -04:00
swaphb 8934ea95a4 Use lightweight cluster topology in CI
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
2026-08-09 22:01:11 -04:00
swaphb 8955ba6873 Add CI
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 7m19s
2026-08-09 21:46:33 -04:00
swaphb a49903fbe8 Apply Kyverno CRDs server-side 2026-08-09 20:16:38 -04:00
swaphb 909fbda30d Use replacement sync for Kyverno CRDs 2026-08-09 20:03:41 -04:00
swaphb c41ccd9cfd Use server-side apply for Kyverno CRDs 2026-08-09 19:59:51 -04:00
swaphb 9e250c75ad Configure ArgoCD for Git repository 2026-08-09 19:56:18 -04:00
swaphb f12fb4d7a1 first commit 2026-08-09 19:52:19 -04:00