deny no-host-ns

see https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/52

changed milestone to %1.13.0

added Big Bang Security clusterAuditor gatekeeper kindfeature priority5 statusdoing labels

waiting for review on https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/59

added 5 commits

• 44eeaf7b...6c0dfd4e - 4 commits from branch main
• b4ad808a - bump version

Compare with previous version

marked this merge request as draft

added 3 commits

• b4ad808a...0afc85ff - 2 commits from branch main
• 3eb98eac - pull from main

Compare with previous version

added 1 commit

• 39af069b - remove exceptions

Compare with previous version

mentioned in merge request monitoring!59 (merged)

marked this merge request as ready

added statusreview label and removed statusdoing label

resolved all threads

We decided to pull in the prometheus-node-exporter 1.14.2 Helm chart into the Monitoring repo. This way we can make our own modifications and not have any OPA exceptions. An upstream PR was also created.

Pending the Monitoring MR, this MR will be ready:

• prometheus node exporter pods actually come up after installs and upgrades
• 'host-network' violations = 0 (removed exception)
• 'host-namespace' violations = 0 (no exception needed)

added 3 commits

• 39af069b...9086cc82 - 2 commits from branch main
• 61b619ed - pull from main

Compare with previous version

added 1 commit

• 807c156b - add hostNetworking parameter back

Compare with previous version

LGTM pending https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/59 merge.

added 5 commits

• 807c156b...9546a7e1 - 4 commits from branch main
• d2f29b29 - pull from main

Compare with previous version

resolved all threads

Blocking until https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/59 is merged