Commit Graph

  • ea158da23f Add networkPolicies for alertmanager, grafana, prometheus-operator and prometheus Arthur Silva Sens 2022-02-17 08:24:45 +00:00
  • 030dec7656 *: add example for disabling NetworkPolicies Paweł Krupa (paulfantom) 2021-12-03 17:36:33 +01:00
  • fddf642de7 jsonnet: add networkpolicies for components accessed by prometheus paulfantom 2021-11-01 10:44:50 +01:00
  • 494b84d038 .github/workflows: Use cilium on e2e-test ArthurSens 2022-03-05 20:47:11 +00:00
  • 5b1d455879 README: Update kubernetes version to 1.23 in minikube Jayapriya Pai 2022-03-09 11:10:38 +05:30
  • 9cf6111562 Merge pull request #1668 from prometheus-operator/automated-updates-main Paweł Krupa 2022-03-07 08:50:46 +01:00
  • 4a9f97b41f [bot] [main] Automated version update Prometheus Operator Bot 2022-03-07 07:41:44 +00:00
  • 28f23c5196 Merge pull request #1663 from prometheus-operator/dependabot/github_actions/actions/checkout-3 Matthias Loibl 2022-03-02 12:12:30 +01:00
  • 5b309fcc0d build(deps): bump actions/checkout from 2 to 3 dependabot[bot] 2022-03-01 22:48:42 +00:00
  • f6e704cceb Merge pull request #1662 from prometheus-operator/automated-updates-main Matthias Loibl 2022-02-28 11:56:47 +01:00
  • 61c007ef56 [bot] [main] Automated version update Prometheus Operator Bot 2022-02-28 07:40:53 +00:00
  • 15664a1983 Merge pull request #1657 from ArthurSens/drop-dashboard-example Philip Gough 2022-02-24 09:16:37 +00:00
  • ef62cebca5 Merge pull request #1658 from prometheus-operator/dependabot/go_modules/scripts/github.com/yannh/kubeconform-0.4.13 Arthur Silva Sens 2022-02-24 07:07:43 +00:00
  • d3aa0eb522 build(deps): bump github.com/yannh/kubeconform in /scripts dependabot[bot] 2022-02-23 22:22:01 +00:00
  • 61f05b2050 Add drop dashboards example ArthurSens 2022-02-23 14:18:57 +00:00
  • 0ac0d7f9bf Merge pull request #1654 from prometheus-operator/automated-updates-main Arthur Silva Sens 2022-02-21 08:26:16 +00:00
  • 36ace1ce7a [bot] [main] Automated version update Prometheus Operator Bot 2022-02-21 07:40:44 +00:00
  • 53542d5cce Merge pull request #1637 from ahysing/custom-requests-kube-rbacc-proxy-self Philip Gough 2022-02-18 16:32:30 +00:00
  • 7ea83986a8 Merge pull request #1649 from PhilipGough/ne-priority Paweł Krupa 2022-02-18 15:26:40 +01:00
  • 2918583c81 node_exporter: Add priorityClassName as system-cluster-critical Philip Gough 2022-02-17 11:53:59 +00:00
  • 5ff20b1718 Merge pull request #1630 from PhilipGough/fix-1603 Paweł Krupa 2022-02-16 21:46:08 +01:00
  • 3f1323dae8 Merge pull request #1647 from wulfthimm/wth/fix-node-exp Arthur Silva Sens 2022-02-16 14:53:11 +00:00
  • 30bfd69c3e removed CAP_ from node-exporter daemonset Wulf Thimm 2022-02-16 14:41:20 +00:00
  • 5850e56501 Merge pull request #1643 from ArthurSens/as/fixme Matthias Loibl 2022-02-15 19:05:54 +01:00
  • 78ca6d9579 Address FIXME ArthurSens 2022-02-15 15:20:21 +00:00
  • d270540308 Merge pull request #1628 from ravilr/fix_cluster_cpu_query Arthur Silva Sens 2022-02-15 06:28:22 +00:00
  • 7612bc33cb Merge pull request #1642 from wulfthimm/fix-node-exp-psp Arthur Silva Sens 2022-02-14 14:55:01 +00:00
  • a5c5adba68 added allowedCapabilities to node-exporter psp Wulf Thimm 2022-02-14 14:38:13 +00:00
  • 7c715c8126 Merge pull request #1624 from ArthurSens/grafana-volume Philip Gough 2022-02-14 11:15:14 +00:00
  • bb85080094 Merge pull request #1634 from PhilipGough/docs Philip Gough 2022-02-14 09:42:07 +00:00
  • dde70ed05a Merge pull request #1641 from dangviettuan/main Paweł Krupa 2022-02-14 10:22:01 +01:00
  • 6d00711044 Merge pull request #1640 from prometheus-operator/automated-updates-main Paweł Krupa 2022-02-14 10:21:48 +01:00
  • cc6a58359f spelling correction Tuan Dang 2022-02-14 15:25:29 +07:00
  • ac7f6b42ab [bot] [main] Automated version update Prometheus Operator Bot 2022-02-14 07:41:12 +00:00
  • a5cf1a6ef6 Added changelog entry Andreas Dreyer Hysing 2022-02-11 15:56:44 +01:00
  • 154019ad82 Added custom overrides for kube-rbac-proxy-self. Andreas Dreyer Hysing 2022-02-11 15:29:58 +01:00
  • 41a5ef110d Update apiVersion from deprecated RBAC Philip Gough 2022-02-10 17:41:21 +00:00
  • 768e882ce8 Merge pull request #1633 from prometheus-operator/automated-updates-main Arthur Silva Sens 2022-02-10 16:14:00 +00:00
  • 2de3d810b1 [bot] [main] Automated version update Prometheus Operator Bot 2022-02-10 15:40:58 +00:00
  • 58fa27a40e Update PodMonitor for kube-proxy Philip Gough 2022-02-10 09:45:27 +00:00
  • 1d1ca283b1 fix cluster:node_cpu:ratio query ravilr 2022-02-09 20:21:05 -08:00
  • 43879b5217 Add extra-volume mount for plugins downloads Arthur Silva Sens 2022-02-07 20:20:20 +00:00
  • e4aae0fbb7 Merge pull request #1620 from prometheus-operator/dependabot/go_modules/scripts/github.com/yannh/kubeconform-0.4.12 Paweł Krupa 2022-02-07 14:41:54 +01:00
  • 89184da7c6 Merge pull request #1622 from prometheus-operator/automated-updates-main Arthur Silva Sens 2022-02-07 08:11:54 +00:00
  • 7b602e1372 [bot] [main] Automated version update Prometheus Operator Bot 2022-02-07 07:40:53 +00:00
  • db61b3e18e Merge pull request #1591 from paulfantom/automountServiceAccountToken Arthur Silva Sens 2022-02-05 18:28:33 +00:00
  • dd37165884 *: reduce kubescale threshold to single digit Paweł Krupa (paulfantom) 2022-02-04 14:17:00 +01:00
  • 776b45a5b4 build(deps): bump github.com/yannh/kubeconform in /scripts dependabot[bot] 2022-02-04 13:15:10 +00:00
  • 0a76dc71d0 Merge pull request #1617 from prometheus-operator/paulfantom-patch-1 Paweł Krupa 2022-02-04 14:13:59 +01:00
  • 8cb6979426 docs: add security considerations regarding automountServiceAccountToken Paweł Krupa (paulfantom) 2022-02-04 14:10:01 +01:00
  • 731843f4cd manifests: regenerate Paweł Krupa (paulfantom) 2022-02-04 14:09:43 +01:00
  • 3429bc77a4 disable injecting unnecessary variables allowing access to k8s API Paweł Krupa (paulfantom) 2022-02-04 14:08:52 +01:00
  • 3436e1a92e Merge pull request #1612 from ArthurSens/remove-hostport Paweł Krupa 2022-02-04 12:58:13 +01:00
  • f51e9b14e9 Merge pull request #1616 from ArthurSens/as/kubescape Paweł Krupa 2022-02-04 12:23:03 +01:00
  • 57be33120d Create dependabot.yml Paweł Krupa 2022-02-04 12:17:58 +01:00
  • ce98a61205 Loosen Kubescape threshold ArthurSens 2022-02-04 10:13:07 +00:00
  • fb92a6dbe0 Document better why we use hostPort on node-exporter ArthurSens 2022-02-02 22:56:43 +00:00
  • 087f479b2a Merge pull request #1614 from arajkumar/sanitize-all-denylist-regex Paweł Krupa 2022-02-03 16:07:41 +01:00
  • 0eabbb5d0c Sanitize all regex denylist in ksm-lite addon Arunprasad Rajkumar 2022-02-03 19:52:44 +05:30
  • 15137a39a7 Merge pull request #1613 from arajkumar/sanitize-regex-denylist Paweł Krupa 2022-02-03 14:07:45 +01:00
  • f16277e8e0 Sanitize regex denylist in ksm-lite addon Arunprasad Rajkumar 2022-02-03 17:50:22 +05:30
  • 755d27bb46 Merge pull request #1610 from ArthurSens/as/linux-hardening Arthur Silva Sens 2022-02-02 12:56:21 +00:00
  • 5b9aa36169 Merge pull request #1611 from ArthurSens/release-0.10 Paweł Krupa 2022-02-01 19:52:23 +01:00
  • 142434ca2b manifests: regenerate Paweł Krupa (paulfantom) 2022-02-01 16:22:57 +01:00
  • 701e3c91eb jsonnet: filter out kube-proxy alerts when kube-proxy is disabled Paweł Krupa (paulfantom) 2022-01-31 23:14:32 +01:00
  • 21e26c808a Merge pull request #1609 from paulfantom/fix-1602 Arthur Silva Sens 2022-02-01 17:23:51 +00:00
  • 35f0bca4da manifests: regenerate Paweł Krupa (paulfantom) 2022-02-01 16:22:57 +01:00
  • 86ac6f79b1 jsonnet: filter out kube-proxy alerts when kube-proxy is disabled Paweł Krupa (paulfantom) 2022-01-31 23:14:32 +01:00
  • 931af3241d Drop Linux capabilities Arthur Silva Sens 2022-02-01 09:25:21 +00:00
  • 6bfb07aac2 Merge pull request #1608 from ArthurSens/as/fixme Paweł Krupa 2022-01-31 19:44:45 +01:00
  • e5610b2e8d Address FIXME ArthurSens 2022-01-31 17:25:00 +00:00
  • 2e5337ee8e Merge pull request #1607 from prometheus-operator/automated-updates-main Arthur Silva Sens 2022-01-31 17:09:07 +00:00
  • dad37c968d [bot] [main] Automated version update Prometheus Operator Bot 2022-01-31 17:04:19 +00:00
  • 85de14dd8d Merge pull request #1606 from paulfantom/revert-1598 Paweł Krupa 2022-01-31 18:01:24 +01:00
  • a44622ed54 Revert "workflows/versions: Enable auto-merge" Paweł Krupa (paulfantom) 2022-01-31 17:52:19 +01:00
  • b113c45a18 Merge pull request #1600 from ArthurSens/readOnlyRootFilesystem Arthur Silva Sens 2022-01-28 11:59:47 +00:00
  • 98664db925 Adjust Kubescape threshold ArthurSens 2022-01-27 16:05:39 +00:00
  • 57c46a2861 components/*: Forbid write access to root filesystem Arthur Silva Sens 2022-01-27 09:13:18 +00:00
  • 48b2bb6a72 Merge pull request #1601 from PhilipGough/kubescape-1 Simon Pasquier 2022-01-27 16:09:38 +01:00
  • b68f3f0f07 Merge pull request #1556 from arajkumar/fix-thanos-sidecar-selector Paweł Krupa 2022-01-27 13:06:59 +01:00
  • ea7141ffe2 docs: Update broken link Philip Gough 2022-01-27 10:20:33 +00:00
  • 3521698843 Merge pull request #1590 from PhilipGough/kubescape-1 Philip Gough 2022-01-27 09:59:22 +00:00
  • c2d6b3e8c6 Merge pull request #1598 from ArthurSens/as/dependency-automerge Paweł Krupa 2022-01-25 17:34:29 +01:00
  • f0d9be27b3 workflows/versions: Enable auto-merge ArthurSens 2022-01-25 15:30:57 +00:00
  • 586fc87b81 make: Lower the threshold for the security scan to account for documented exceptions Philip Gough 2022-01-19 15:06:45 +00:00
  • b924650344 docs: Add details about security scanning of manifests and exceptions Philip Gough 2022-01-19 15:06:15 +00:00
  • 02f1550261 ci: Add exceptions for node-exporter to kubescape config Philip Gough 2022-01-19 15:04:31 +00:00
  • 4d004393e1 Merge pull request #1593 from prometheus-operator/as/forbid-privilege-scalation Arthur Silva Sens 2022-01-24 10:38:33 +00:00
  • 2d02121731 kubescape: Adjust risk threshold Arthur Silva Sens 2022-01-22 17:07:19 +00:00
  • b60b302499 Explicitly declare allowPrivilegeEscalation to false Arthur Silva Sens 2022-01-20 22:11:54 +00:00
  • 90ad3c99fc Merge pull request #1594 from prometheus-operator/automated-updates-main Arthur Silva Sens 2022-01-24 08:31:53 +00:00
  • ef40bc5759 [bot] [main] Automated version update Prometheus Operator Bot 2022-01-24 07:43:49 +00:00
  • f7d3019a8f Merge pull request #1584 from PhilipGough/fix-1466 Arthur Silva Sens 2022-01-18 11:51:29 -03:00
  • 9c9f73f6c5 ci: Add check for security scan of manifest Philip Gough 2022-01-17 15:07:35 +00:00
  • e286f74647 make: Target for security scan Philip Gough 2022-01-17 15:06:50 +00:00
  • b8a05f4197 scripts: Adds kubescape to tooling Philip Gough 2022-01-17 15:06:25 +00:00
  • d2cae36f84 Merge pull request #1586 from PhilipGough/go-version-bump Philip Gough 2022-01-17 16:08:00 +00:00
  • 1344092b36 build: Bump to build with Go 1.17 Philip Gough 2022-01-17 15:18:46 +00:00
  • fabf443d4d Merge pull request #1583 from prometheus-operator/automated-updates-main Paweł Krupa 2022-01-17 11:49:19 +01:00
  • b8bbb57b28 [bot] [main] Automated version update Prometheus Operator Bot 2022-01-17 07:42:02 +00:00