Merge requests · Big Bang · GitLab

UNCLASSIFIED - NO CUI

ATTENTION: Immediate action is required to maintain compatibility with P1 services. Please visit https://p1notifications.dso.mil and see the "DSO.MIL Certificates Renewal" announcement under the "Notifications" section for more details.

Refactor Loki to use wildcards for Automount hardening on service accounts

bigbang!3769 · created Jan 31, 2024 by Dustin Hilgaertner 2.20.0
kindenhancement loki priority7 statusreview
- Merged
- 1
- Approved
updated Feb 09, 2024
Refactor earlier mutator implementations to use wildcard methodology - Kiali

bigbang!3745 · created Jan 26, 2024 by Chris Harden 2.20.0
kiali kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Feb 09, 2024
Refactor earlier mutator implementations to use wildcard methodology - AuthService

bigbang!3824 · created Feb 07, 2024 by Chris Harden
authservice kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Feb 08, 2024
Refactor earlier mutator implementations to use wildcard methodology - Harbor

bigbang!3818 · created Feb 06, 2024 by Chris Harden
harbor kindenhancement priority7 statusreview teamcore/security
- Merged
- 3
- Approved
updated Feb 07, 2024
Refactor earlier mutator implementations to use wildcard methodology - Neuvector

bigbang!3765 · created Jan 30, 2024 by Chris Harden
kindenhancement neuvector priority7 statusreview teamcore/security
- Merged
- 2
- Approved
updated Feb 07, 2024
Refactor earlier mutator implementations to use wildcard methodology - gitlab-runner

bigbang!3775 · created Jan 31, 2024 by Dustin Hilgaertner
gitlabRunner kindenhancement priority7 statusreview
- Merged
- 2
- Approved
updated Feb 05, 2024
Refactor earlier mutator implementations to use wildcard methodology - Nexus

bigbang!3776 · created Jan 31, 2024 by Chris Harden
kindenhancement nexus priority7 statusreview teamcore/security
- Merged
- 1
- Approved
updated Feb 01, 2024
Refactor earlier mutator implementations to use wildcard methodology - Istio

bigbang!3744 · created Jan 26, 2024 by Chris Harden
istio kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 29, 2024
Refactor earlier mutator implementations to use wildcard methodology - Istio Operator

bigbang!3743 · created Jan 26, 2024 by Chris Harden
istioOperator kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 29, 2024
Refactor PodsToHarden format

big-bang/product/packages/kyverno-policies!128 · created Jan 25, 2024 by Dustin Hilgaertner
kindenhancement kyvernoPolicies priority7 statusreview teamSecurity & Compliance
- Merged
- +2
- 2
- Approved
updated Jan 29, 2024
Refactor Twistlock ServiceAccount hardening to use wildcard

bigbang!3725 · created Jan 24, 2024 by Justen Mehl
kindenhancement priority7 statusreview twistlock
- Merged
- 1
- Approved
updated Jan 29, 2024
Mattermost and operator mitigate automount sa token findings

bigbang!3625 · created Jan 03, 2024 by Dustin Hilgaertner 2.19.0
kindenhancement mattermost mattermostOperator priority7 statusreview
- Merged
- 2
- Approved
updated Jan 27, 2024
HAProxy: disabled automountserviceaccounttoken in the haproxy authservices

bigbang!3658 · created Jan 09, 2024 by Chris Harden 2.19.0
haproxy kindenhancement priority7 statusreview
- Merged
- Approved
updated Jan 27, 2024
Mitigating the automount service account token findings for Thanos

bigbang!3600 · created Dec 20, 2023 by Dustin Hilgaertner 2.19.0
grafana kindenhancement monitoring priority7 statusreview thanos
- Merged
- 2
- Approved
updated Jan 27, 2024
Mitigate automountServiceAccountToken findings in flux-system and bigbang namespaces

bigbang!3634 · created Jan 04, 2024 by Justen Mehl 2.19.0
bigbang flux kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 27, 2024
Disable automount of service account token for keycloak

bigbang!3696 · created Jan 19, 2024 by Sam Vongsay 2.19.0
keycloak kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 22, 2024
Document service account token hardening epic work

big-bang/product/packages/kyverno-policies!127 · created Jan 16, 2024 by Justen Mehl
kinddocs priority7 skip-bb-mr statusreview
- Merged
- +2
- Approved
updated Jan 17, 2024
Update testing steps

big-bang/product/packages/authservice!142 · created Jan 12, 2024 by Marcus Montgomery
authservice kinddocs priority7 statusreview
- Merged
- Approved
updated Jan 12, 2024
Nexus: disabled automountserviceaccounttoken in the Nexus namespace

bigbang!3637 · created Jan 04, 2024 by Chris Harden
kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 08, 2024
Resolve "Mitigate automountServiceAccountToken findings in fluentbit"

bigbang!3576 · created Dec 15, 2023 by Sam Vongsay 2.18.0
kindenhancement priority7 statusreview
- Merged
- Approved
updated Dec 20, 2023

Prev
1
2
3
4
5
6
7
…
9
Next

UNCLASSIFIED - NO CUI