Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Notification Controller could notify on security misconfigurations #620

Open
pjbgf opened this issue Sep 17, 2023 · 0 comments
Open

Notification Controller could notify on security misconfigurations #620

pjbgf opened this issue Sep 17, 2023 · 0 comments
Labels
area/security Security related issues and pull requests

Comments

@pjbgf
Copy link
Member

pjbgf commented Sep 17, 2023

This issue tracks the spike on one of the CNCF Tag Security recommendations: Use notification controller for user/admin awareness of Flux configuration/misconfiguration in teams/slack.

Justification: Soft multi-tenancy security relies upon lockdown mode, however this is not enabled by default.

The scope here would be around security misconfigurations, such as not complying with some of the best practices (e.g. start-up flags).

@makkes makkes added the area/security Security related issues and pull requests label Sep 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security Security related issues and pull requests
Projects
None yet
Development

No branches or pull requests

2 participants