4 commits

Author	SHA1	Message	Date
Tomas Zvala	30c77ea4c1	Add the option to enable default Pod Security Configuration (#9017) ... * Add the option to enable default Pod Security Configuration Enable Pod Security in all namespaces by default with the option to exempt some namespaces. Without the change only namespaces explicitly configured will receive the admission plugin treatment. * Fix the PR according to code review comments * Revert the latest changes - leave the empty file when kube_pod_security_use_default, but add comment explaining the empty file - don't attempt magic at conditionally adding PodSecurity to kube_apiserver_admission_plugins_needs_configuration	2022-08-18 01:16:36 -07:00
Alessio Greggi	3ce5458f32	hardening: Add SeccompDefault admission plugin for kubelet (#9074) ... * docs(hardening): add SeccompDefault admission plugin to kubelet feature gates * fix(kubelet-config): enable config through kubelet_feature_gates * feat(kubelet): add kubelet_seccomp_default variable	2022-07-19 00:50:07 -07:00
Alessio Greggi	97b4d79ed5	feat: make kubernetes owner parametrized (#8952) ... * feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12	2022-06-17 01:34:32 -07:00
Alessio Greggi	d22204a59f	docs: add hardening guide (#8868)	2022-05-29 12:36:50 -07:00