-
6e7f5b39fb
make falco alerting opt in
main
swaphb
2026-08-16 21:36:09 -04:00
-
6c79340d9a
add environment-specific cilium profiles
swaphb
2026-08-16 20:04:14 -04:00
-
1a372b7eac
fix cilium routing and cluster dns
swaphb
2026-08-16 19:41:40 -04:00
-
88e735109f
consolidate Flatcar provisioning priorities
swaphb
2026-08-16 14:40:43 -04:00
-
20ff222531
document Terraform to Ansible handoff
swaphb
2026-08-16 14:37:39 -04:00
-
9eca9b49e0
add Proxmox Terraform infrastructure backlog
swaphb
2026-08-16 14:34:05 -04:00
-
664c3c8236
add Ansible Flatcar and platform bootstrap
swaphb
2026-08-15 16:40:37 -04:00
-
478cc49e50
update build status and project roadmap
swaphb
2026-08-15 16:13:42 -04:00
-
e312fd3e88
add Flatcar lifecycle management backlog
swaphb
2026-08-15 14:39:03 -04:00
-
5c1e6205a7
document Falco runtime topology
swaphb
2026-08-15 14:22:56 -04:00
-
2ca1b150cc
reduce low priority Falco Slack alerts
swaphb
2026-08-15 14:13:53 -04:00
-
4484865bbf
add infrastructure automation backlog
swaphb
2026-08-15 13:44:27 -04:00
-
0db746af71
configure Falcosidekick Slack forwarding
swaphb
2026-08-15 13:38:42 -04:00
-
6632c91f9f
document Falco alerting secret
swaphb
2026-08-15 13:30:14 -04:00
-
68dc427a73
update project progress documentation
swaphb
2026-08-15 13:26:34 -04:00
-
fc53e16dd4
organize deployment configuration
swaphb
2026-08-15 13:17:46 -04:00
-
12f3276465
replace immutable test pods during Argo sync
swaphb
2026-08-14 22:26:00 -04:00
-
d10018edc1
keep compliant workload free of shell activity
swaphb
2026-08-14 22:23:17 -04:00
-
2506b61ae0
add Kyverno and Falco security test workloads
swaphb
2026-08-14 22:08:52 -04:00
-
2bd22db276
add Flatcar k3d security test host
swaphb
2026-08-14 21:47:10 -04:00
-
e79045712d
wait for K3s API readiness in CI
swaphb
2026-08-11 19:17:45 -04:00
-
c272dd4581
support kube-bench artifacts on Gitea Actions
swaphb
2026-08-11 19:07:21 -04:00
-
5ddb0f2fef
install jq for kube-bench report parsing
swaphb
2026-08-11 19:04:00 -04:00
-
3b1ca2a468
emit clean kube-bench JSON report
swaphb
2026-08-11 19:00:11 -04:00
-
992f2e2b07
fix kube-bench JSON extraction
swaphb
2026-08-11 17:51:06 -04:00
-
f7fb479631
normalize kube-bench output before validation
swaphb
2026-08-11 17:45:29 -04:00
-
3256a0b93b
adapt kube-bench scan for containerized k3d
swaphb
2026-08-11 17:35:00 -04:00
-
78504c7378
preserve TLS verification for k3d runner endpoint
swaphb
2026-08-11 17:16:26 -04:00
-
048575fa18
resolve k3d API through runner network gateway
swaphb
2026-08-11 17:04:27 -04:00
-
c0a6c050b5
fix k3d kubeconfig for Docker runner
swaphb
2026-08-11 17:00:44 -04:00
-
22ccecc363
fix ephemeral k3d cluster cleanup
swaphb
2026-08-11 16:55:16 -04:00
-
4c1864587f
install kubectl in kube-bench workflow
swaphb
2026-08-11 16:54:07 -04:00
-
97320318f4
fix Proxmox snippet storage detection
swaphb
2026-08-11 16:49:04 -04:00
-
2a9d312326
add Flatcar Proxmox Gitea runner bootstrap
swaphb
2026-08-11 16:26:09 -04:00
-
51dff6d515
make falco custom rules self contained
swaphb
2026-08-10 21:54:56 -04:00
-
797e9efc15
fix falco rules configmap key
swaphb
2026-08-10 21:51:17 -04:00
-
caebc122e3
fix falco rules configmap namespace
swaphb
2026-08-10 21:47:21 -04:00
-
15570310ed
add falco operator plugin and custom rules
swaphb
2026-08-10 21:22:55 -04:00
-
caedb9ab8d
migrate falco deployment to operator
swaphb
2026-08-10 21:14:38 -04:00
-
f183d7f8dc
document default namespace policy scope
swaphb
2026-08-10 18:02:40 -04:00
-
e389331a07
block application resources in default namespace
swaphb
2026-08-10 18:01:00 -04:00
-
1c1e9dc394
upgrade falco helm chart to 9.1.0
swaphb
2026-08-10 17:51:55 -04:00
-
0e3e2d89f3
upgrade kyverno and fix policy validation
swaphb
2026-08-10 17:42:09 -04:00
-
b890d131a6
fix kyverno boolean and resource validation
swaphb
2026-08-10 17:41:55 -04:00
-
ff033f2fcb
Add Kyverno admission policies and CIS mappings
swaphb
2026-08-10 17:34:45 -04:00
-
fc786ec63c
Add Flatcar and Cilium kube-proxy-free architecture
swaphb
2026-08-10 17:19:18 -04:00
-
8934ea95a4
Use lightweight cluster topology in CI
swaphb
2026-08-09 22:01:11 -04:00
-
8955ba6873
Add CI
swaphb
2026-08-09 21:46:33 -04:00
-
a49903fbe8
Apply Kyverno CRDs server-side
swaphb
2026-08-09 20:16:38 -04:00
-
909fbda30d
Use replacement sync for Kyverno CRDs
swaphb
2026-08-09 20:03:41 -04:00
-
c41ccd9cfd
Use server-side apply for Kyverno CRDs
swaphb
2026-08-09 19:59:51 -04:00
-
9e250c75ad
Configure ArgoCD for Git repository
swaphb
2026-08-09 19:56:18 -04:00
-
f12fb4d7a1
first commit
swaphb
2026-08-09 19:52:19 -04:00