jakman85andClaude Opus 4.8 1b0848c224 fix(kyverno): correct default-deny-shape to require both Ingress+Egress via deny.conditions (scalar-array pattern was inverted) ...

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-25 16:00:42 -05:00

..

disallow-plaintext-secrets.yaml

T-0.5 Kyverno L0 policies + CLI tests + admission scaffolding (R-TEST-01, R-NET-01, R-SEC-01/02, R-IDP-02, R-GITOPS-02)

2026-08-16 00:08:32 -05:00

require-auth-mode-label.yaml

phase2-prep: per-component no-secret rollout + component hardening (author-first)

2026-08-16 21:34:57 -05:00

require-default-deny-baseline.yaml

T-0.5 Kyverno L0 policies + CLI tests + admission scaffolding (R-TEST-01, R-NET-01, R-SEC-01/02, R-IDP-02, R-GITOPS-02)

2026-08-16 00:08:32 -05:00

require-egress-class-label.yaml

docs(vpn-egress): reflect ADR-0015 node-tunnel egress, retire gluetun narrative

2026-08-24 14:50:08 -05:00

restrict-host-namespaces.yaml

phase2-prep: per-component no-secret rollout + component hardening (author-first)

2026-08-16 21:34:57 -05:00

validate-default-deny-shape.yaml

fix(kyverno): correct default-deny-shape to require both Ingress+Egress via deny.conditions (scalar-array pattern was inverted)

2026-08-25 16:00:42 -05:00