Merge requests · Big Bang · GitLab

UNCLASSIFIED - NO CUI

ATTENTION: Immediate action is required to maintain compatibility with P1 services. Please visit https://p1notifications.dso.mil and see the "DSO.MIL Certificates Renewal" announcement under the "Notifications" section for more details.

Refactor PodsToHarden format

big-bang/product/packages/kyverno-policies!128 · created Jan 25, 2024 by Dustin Hilgaertner
kindenhancement kyvernoPolicies priority7 statusreview teamSecurity & Compliance
- Merged
- +2
- 2
- Approved
updated Jan 29, 2024
Refactor Twistlock ServiceAccount hardening to use wildcard

bigbang!3725 · created Jan 24, 2024 by Justen Mehl
kindenhancement priority7 statusreview twistlock
- Merged
- 1
- Approved
updated Jan 29, 2024
Disable automount of service account token for keycloak

bigbang!3696 · created Jan 19, 2024 by Sam Vongsay 2.19.0
keycloak kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 22, 2024
Document service account token hardening epic work

big-bang/product/packages/kyverno-policies!127 · created Jan 16, 2024 by Justen Mehl
kinddocs priority7 skip-bb-mr statusreview
- Merged
- +2
- Approved
updated Jan 17, 2024
Update testing steps

big-bang/product/packages/authservice!142 · created Jan 12, 2024 by Marcus Montgomery
authservice kinddocs priority7 statusreview
- Merged
- Approved
updated Jan 12, 2024
Refactor Gitlab + Monitoring automountServiceAccountToken hardening for consistency

bigbang!3667 · created Jan 11, 2024 by Dustin Hilgaertner 2.20.0
debug gitlab kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Feb 09, 2024
HAProxy: disabled automountserviceaccounttoken in the haproxy authservices

bigbang!3658 · created Jan 09, 2024 by Chris Harden 2.19.0
haproxy kindenhancement priority7 statusreview
- Merged
- Approved
updated Jan 27, 2024
Nexus: disabled automountserviceaccounttoken in the Nexus namespace

bigbang!3637 · created Jan 04, 2024 by Chris Harden
kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 08, 2024
Mitigate automountServiceAccountToken findings in flux-system and bigbang namespaces

bigbang!3634 · created Jan 04, 2024 by Justen Mehl 2.19.0
bigbang flux kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Jan 27, 2024
Draft: Resolve "Refactor earlier mutator implementations to use wildcard methodology"

bigbang!3631 · created Jan 04, 2024 by Justen Mehl
kindenhancement priority7 statusdoing
- Closed
- 0 of 1 Approvals
updated Jan 04, 2024
Harden SA Token for eckOperator

bigbang!3630 · created Jan 04, 2024 by Sam Vongsay 2.18.0
eckoperator elasticsearchKibana fluentbit kindenhancement priority7 statusreview
- Merged
- Approved
updated Jun 06, 2024
Mattermost and operator mitigate automount sa token findings

bigbang!3625 · created Jan 03, 2024 by Dustin Hilgaertner 2.19.0
kindenhancement mattermost mattermostOperator priority7 statusreview
- Merged
- 2
- Approved
updated Jan 27, 2024
Mitigating the automount service account token findings for Thanos

bigbang!3600 · created Dec 20, 2023 by Dustin Hilgaertner 2.19.0
grafana kindenhancement monitoring priority7 statusreview thanos
- Merged
- 2
- Approved
updated Jan 27, 2024
Mitigating the automount service account token findings in vault

bigbang!3578 · created Dec 15, 2023 by Dustin Hilgaertner 2.18.0
kindenhancement priority7 statusreview vault
- Merged
- Approved
updated Dec 18, 2023
Resolve "Mitigate automountServiceAccountToken findings in fluentbit"

bigbang!3576 · created Dec 15, 2023 by Sam Vongsay 2.18.0
kindenhancement priority7 statusreview
- Merged
- Approved
updated Dec 20, 2023
Jaeger: disabled automountserviceaccounttoken in the Jaeger namespace

bigbang!3561 · created Dec 14, 2023 by Chris Harden 2.18.0
jaeger kindenhancement priority7 statusreview
- Merged
- Approved
updated Dec 15, 2023
Mitigating the automount service account token findings in Fortify

bigbang!3560 · created Dec 14, 2023 by Dustin Hilgaertner 2.18.0
fortify kindenhancement priority7 statusreview
- Merged
- Approved
updated Dec 18, 2023
Update documentation for automountServiceAccountToken hardening

big-bang/product/maintained/confluence!91 · created Dec 13, 2023 by Justen Mehl
kinddocs priority7 skip-bb-mr statusreview
- Merged
- Approved
updated Dec 14, 2023
Mitigate automountServiceAccountToken findings in Confluence

bigbang!3555 · created Dec 13, 2023 by Justen Mehl 2.18.0
confluence kindenhancement priority7 statusreview
- Merged
- 1
- Approved
updated Dec 18, 2023
Draft: Nexus: disabled automountserviceaccounttoken in the nexus-repository-manager namespace

bigbang!3554 · created Dec 12, 2023 by Chris Harden
kindenhancement priority7 statusdoing
- Closed
- 0 of 1 Approvals
updated Dec 13, 2023

Prev
1
2
3
4
5
6
7
8
…
11
Next

UNCLASSIFIED - NO CUI