Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Advanced Secure setup #1

Draft
wants to merge 94 commits into
base: main
Choose a base branch
from
Draft

Advanced Secure setup #1

wants to merge 94 commits into from

Commits on Mar 9, 2024

  1. PSS/PSA label on Namespace

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    943db94 View commit details
    Browse the repository at this point in the history

  2. gke - security_posture_config

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    1ac4b7b View commit details
    Browse the repository at this point in the history

  3. terraform fmt -recursive

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    50d2bde View commit details
    Browse the repository at this point in the history

  4. terraform fmt -recursive

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    757e60c View commit details
    Browse the repository at this point in the history

  5. workload with securityContext

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    6e69c1e View commit details
    Browse the repository at this point in the history

  6. Create GAR

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    d21ff7e View commit details
    Browse the repository at this point in the history

  7. Enable containers scanning on GAR

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    7a737b6 View commit details
    Browse the repository at this point in the history

  8. More docs

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    edea061 View commit details
    Browse the repository at this point in the history

  9. make docs

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    a970ec5 View commit details
    Browse the repository at this point in the history

  10. split htc resources in different files

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    31811fd View commit details
    Browse the repository at this point in the history

  11. Deploy a Workload

    @mathieu-benoit
    mathieu-benoit committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    d9950b7 View commit details
    Browse the repository at this point in the history

Commits on Mar 10, 2024

  1. Use Humanitec Agent

    @mathieu-benoit
    mathieu-benoit committed Mar 10, 2024
    Configuration menu
    Copy the full SHA
    58a4750 View commit details
    Browse the repository at this point in the history

  2. Do not propagate red_id between cluster and agent

    @mathieu-benoit
    mathieu-benoit committed Mar 10, 2024
    Configuration menu
    Copy the full SHA
    d1e72b1 View commit details
    Browse the repository at this point in the history

  3. more securityContext for the Agent

    @mathieu-benoit
    mathieu-benoit committed Mar 10, 2024
    Configuration menu
    Copy the full SHA
    b9f3ba3 View commit details
    Browse the repository at this point in the history

  4. matching criteria: force_delete = true

    @mathieu-benoit
    mathieu-benoit committed Mar 10, 2024
    Configuration menu
    Copy the full SHA
    4be4c12 View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2024

  1. Private Terraform Runner

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    ae30d2d View commit details
    Browse the repository at this point in the history

  2. make fmt

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    3f4e41b View commit details
    Browse the repository at this point in the history

  3. More docs

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    c46ce5c View commit details
    Browse the repository at this point in the history

  4. gke_release_channel = RAPID

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    e1f0045 View commit details
    Browse the repository at this point in the history

  5. make docs

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    f6544e1 View commit details
    Browse the repository at this point in the history

  6. humanitec 1.0

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    9c07599 View commit details
    Browse the repository at this point in the history

  7. Fix release_channel for backstage

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    6d37e6c View commit details
    Browse the repository at this point in the history

  8. make fmt + make docs

    @mathieu-benoit
    mathieu-benoit committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    5e82413 View commit details
    Browse the repository at this point in the history

Commits on Mar 13, 2024

  1. do not do cidr_block = "0.0.0.0/0" + assign a static ip to cloud nat

    @mathieu-benoit
    mathieu-benoit committed Mar 13, 2024
    Configuration menu
    Copy the full SHA
    cb5d2e2 View commit details
    Browse the repository at this point in the history

Commits on Mar 30, 2024

  1. Fix terraform-runner res def's matching criteria

    @mathieu-benoit
    mathieu-benoit committed Mar 30, 2024
    Configuration menu
    Copy the full SHA
    ee1348f View commit details
    Browse the repository at this point in the history

  2. roles/container.developer

    @mathieu-benoit
    mathieu-benoit committed Mar 30, 2024
    Configuration menu
    Copy the full SHA
    8bb71fe View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2024

  1. GKE Enterprise (Fleet/Anthos)

    @mathieu-benoit
    mathieu-benoit committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    4309e5f View commit details
    Browse the repository at this point in the history

  2. Update ref arch image

    @mathieu-benoit
    mathieu-benoit committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    a73fd88 View commit details
    Browse the repository at this point in the history

  3. 1 dedicated k8s-service-account per workload

    @mathieu-benoit
    mathieu-benoit committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    c7bce40 View commit details
    Browse the repository at this point in the history

  4. Update ref arch image

    @mathieu-benoit
    mathieu-benoit committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    a3303ff View commit details
    Browse the repository at this point in the history

Commits on Apr 7, 2024

  1. ASM + Istio + STRICT mTLS

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    3bee9d9 View commit details
    Browse the repository at this point in the history

  2. make docs

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    b7baab8 View commit details
    Browse the repository at this point in the history

  3. Update ref arch image with Istio

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    0c12212 View commit details
    Browse the repository at this point in the history

  4. PSS/PSA for Agent's namespace

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    0b6603c View commit details
    Browse the repository at this point in the history

  5. base-env to test the TF runner

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    77e15f4 View commit details
    Browse the repository at this point in the history

  6. make fmt

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    07234ca View commit details
    Browse the repository at this point in the history

  7. PSS/PSA for humanitec-terraform-runner Namespace

    @mathieu-benoit
    mathieu-benoit committed Apr 7, 2024
    Configuration menu
    Copy the full SHA
    3ddb7a7 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Add Humanitec Operator with external Secrets in GSM

    @mathieu-benoit
    mathieu-benoit committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    7b9a265 View commit details
    Browse the repository at this point in the history

  2. make fmt

    @mathieu-benoit
    mathieu-benoit committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    6565c5a View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2024

  1. Update ref arch image with Humanitec Operator

    @mathieu-benoit
    mathieu-benoit committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    dde1888 View commit details
    Browse the repository at this point in the history

  2. PSS/PSA restricted for Nginx Ingress controller Namespace

    @mathieu-benoit
    mathieu-benoit committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    d289a79 View commit details
    Browse the repository at this point in the history

  3. PSS/PSA restricted for Humanitec Operator Namespace

    @mathieu-benoit
    mathieu-benoit committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    20cad0f View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2024

  1. Humanitec Agent 1.1.8

    @mathieu-benoit
    mathieu-benoit committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    9c3ed86 View commit details
    Browse the repository at this point in the history

  2. Humanitec Operator 0.1.8

    @mathieu-benoit
    mathieu-benoit committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    c8daa6f View commit details
    Browse the repository at this point in the history

  3. Fix terraform plan in docs

    @mathieu-benoit
    mathieu-benoit committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    b0406ee View commit details
    Browse the repository at this point in the history

  4. custom secretmanager.readwrite role

    @mathieu-benoit
    mathieu-benoit committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    50110f0 View commit details
    Browse the repository at this point in the history

  5. make fmt

    @mathieu-benoit
    mathieu-benoit committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    7a4478a View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2024

  1. humanitec_key

    @mathieu-benoit
    mathieu-benoit committed Apr 16, 2024
    Configuration menu
    Copy the full SHA
    2639f57 View commit details
    Browse the repository at this point in the history

Commits on Apr 23, 2024

  1. oci://ghcr.io/humanitec/charts/humanitec-operator

    @mathieu-benoit
    mathieu-benoit committed Apr 23, 2024
    Configuration menu
    Copy the full SHA
    fe61af7 View commit details
    Browse the repository at this point in the history

  2. Helm chart for the Agent

    @mathieu-benoit
    mathieu-benoit committed Apr 23, 2024
    Configuration menu
    Copy the full SHA
    20b2ea4 View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2024

  1. Nginx Ingress 4.10.1

    @mathieu-benoit
    mathieu-benoit committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    31b3a9d View commit details
    Browse the repository at this point in the history

  2. Humanitec Operator 0.1.10

    @mathieu-benoit
    mathieu-benoit committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    a1b0d88 View commit details
    Browse the repository at this point in the history

  3. default SecretStore in Orchestrator doesn't need the static credentia… 

    …ls (cookies are written by the Operator)
    @mathieu-benoit
    mathieu-benoit committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    49820eb View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2024

  1. Humanitec Operator 0.1.11

    @mathieu-benoit
    mathieu-benoit committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    807ed3e View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. no need of humanitec_secretstore in SaaS for default

    @mathieu-benoit
    mathieu-benoit committed May 6, 2024
    Configuration menu
    Copy the full SHA
    469e99b View commit details
    Browse the repository at this point in the history

Commits on May 7, 2024

  1. Use Cloud Account for GKE cluster credentials

    @mathieu-benoit
    mathieu-benoit committed May 7, 2024
    Configuration menu
    Copy the full SHA
    219d5e6 View commit details
    Browse the repository at this point in the history

  2. Dynamic GCP Cloud Account for GKE cluster access

    @mathieu-benoit
    mathieu-benoit committed May 7, 2024
    Configuration menu
    Copy the full SHA
    958454b View commit details
    Browse the repository at this point in the history

Commits on May 13, 2024

  1. google_iam_workload_identity_pool_provider's display_name

    @mathieu-benoit
    mathieu-benoit committed May 13, 2024
    Configuration menu
    Copy the full SHA
    71047bd View commit details
    Browse the repository at this point in the history

Commits on May 16, 2024

  1. Humanitec Operator 0.2.1

    @mathieu-benoit
    mathieu-benoit committed May 16, 2024
    Configuration menu
    Copy the full SHA
    04034d2 View commit details
    Browse the repository at this point in the history

Commits on May 17, 2024

  1. Humanitec Operator 0.2.3

    @mathieu-benoit
    mathieu-benoit committed May 17, 2024
    Configuration menu
    Copy the full SHA
    e273747 View commit details
    Browse the repository at this point in the history

  2. Document backend kubernetes and leases for TF runner

    @mathieu-benoit
    mathieu-benoit committed May 17, 2024
    Configuration menu
    Copy the full SHA
    5c73088 View commit details
    Browse the repository at this point in the history

Commits on May 21, 2024

  1. Agent Helm chart 1.0.1 + app 1.2.1-distroless

    @mathieu-benoit
    mathieu-benoit committed May 21, 2024
    Configuration menu
    Copy the full SHA
    2d1ca63 View commit details
    Browse the repository at this point in the history

  2. naming for terraform_runner

    @mathieu-benoit
    mathieu-benoit committed May 21, 2024
    Configuration menu
    Copy the full SHA
    98869cb View commit details
    Browse the repository at this point in the history

  3. cleanup tf runner

    @mathieu-benoit
    mathieu-benoit committed May 21, 2024
    Configuration menu
    Copy the full SHA
    b1cd9d5 View commit details
    Browse the repository at this point in the history

Commits on May 23, 2024

  1. Agent app 1.3.0-distroless

    @mathieu-benoit
    mathieu-benoit committed May 23, 2024
    Configuration menu
    Copy the full SHA
    da1a156 View commit details
    Browse the repository at this point in the history

  2. Use Dynamic Cloud Account for private TF runner's cluster

    @mathieu-benoit
    mathieu-benoit committed May 23, 2024
    Configuration menu
    Copy the full SHA
    f0bc856 View commit details
    Browse the repository at this point in the history

  3. make fmt

    @mathieu-benoit
    mathieu-benoit committed May 23, 2024
    Configuration menu
    Copy the full SHA
    bd4de3a View commit details
    Browse the repository at this point in the history

Commits on May 27, 2024

  1. Least privileges gke_cluster_access role from Orchestrator to GKE clu… 

    …sters
    @mathieu-benoit
    mathieu-benoit committed May 27, 2024
    Configuration menu
    Copy the full SHA
    39bd193 View commit details
    Browse the repository at this point in the history

  2. Agent - chart 1.1.0 and app 1.4.0 (distroless by default)

    @mathieu-benoit
    mathieu-benoit committed May 27, 2024
    Configuration menu
    Copy the full SHA
    5059b81 View commit details
    Browse the repository at this point in the history

Commits on May 28, 2024

  1. Simplify roles list for accessing GKE cluster

    @mathieu-benoit
    mathieu-benoit committed May 28, 2024
    Configuration menu
    Copy the full SHA
    30d9aa0 View commit details
    Browse the repository at this point in the history

Commits on May 29, 2024

  1. Least privileges kubernetes_cluster_role to access the GKE cluster fr… 

    …om the Orchestrator
    @mathieu-benoit
    mathieu-benoit committed May 29, 2024
    Configuration menu
    Copy the full SHA
    3603dd6 View commit details
    Browse the repository at this point in the history

  2. No need container.clusters.getCredentials to access the GKE cluster

    @mathieu-benoit
    mathieu-benoit committed May 29, 2024
    Configuration menu
    Copy the full SHA
    961bc1a View commit details
    Browse the repository at this point in the history

Commits on May 31, 2024

  1. Operator 0.2.4 + explicit tag and repo

    @mathieu-benoit
    mathieu-benoit committed May 31, 2024
    Configuration menu
    Copy the full SHA
    1a7657f View commit details
    Browse the repository at this point in the history

  2. make fmt

    @mathieu-benoit
    mathieu-benoit committed May 31, 2024
    Configuration menu
    Copy the full SHA
    82cec2c View commit details
    Browse the repository at this point in the history

  3. explicit repo for Agent too

    @mathieu-benoit
    mathieu-benoit committed May 31, 2024
    Configuration menu
    Copy the full SHA
    340e5c5 View commit details
    Browse the repository at this point in the history

  4. Add role to pause environments

    @mathieu-benoit
    mathieu-benoit committed May 31, 2024
    Configuration menu
    Copy the full SHA
    9d5de41 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2024

  1. Fix deletecollection for Humanitec's CRs and Secret for TF runner

    @mathieu-benoit
    mathieu-benoit committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    4445a53 View commit details
    Browse the repository at this point in the history

  2. TF runner roles is just for its dedicated namespace, not clusterrole

    @mathieu-benoit
    mathieu-benoit committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    06b9d6a View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2024

  1. Humanitec Operator 0.2.5

    @mathieu-benoit
    mathieu-benoit committed Jun 13, 2024
    Configuration menu
    Copy the full SHA
    125201e View commit details
    Browse the repository at this point in the history

Commits on Jun 19, 2024

  1. Agent 1.1.1

    @mathieu-benoit
    mathieu-benoit committed Jun 19, 2024
    Configuration menu
    Copy the full SHA
    69c8ec8 View commit details
    Browse the repository at this point in the history

  2. Operator 0.2.6

    @mathieu-benoit
    mathieu-benoit committed Jun 19, 2024
    Configuration menu
    Copy the full SHA
    2163c01 View commit details
    Browse the repository at this point in the history

  3. splitList for ksa

    @mathieu-benoit
    mathieu-benoit committed Jun 19, 2024
    Configuration menu
    Copy the full SHA
    95d2edf View commit details
    Browse the repository at this point in the history

Commits on Jun 21, 2024

  1. Agent chart 1.2.0

    @mathieu-benoit
    mathieu-benoit committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    5657fd6 View commit details
    Browse the repository at this point in the history

Commits on Jul 8, 2024

  1. ingress-nginx 4.11.0

    @mathieu-benoit
    mathieu-benoit committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    5339734 View commit details
    Browse the repository at this point in the history

  2. Humanitec Operator 0.2.7

    @mathieu-benoit
    mathieu-benoit committed Jul 8, 2024
    Configuration menu
    Copy the full SHA
    5fdd690 View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. Humanitec Operator 0.2.8

    @mathieu-benoit
    mathieu-benoit committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    7199fad View commit details
    Browse the repository at this point in the history

Commits on Jul 24, 2024

  1. ingress-nginx 4.11.1

    @mathieu-benoit
    mathieu-benoit committed Jul 24, 2024
    Configuration menu
    Copy the full SHA
    d898093 View commit details
    Browse the repository at this point in the history

  2. humanitec-agent 1.2.3

    @mathieu-benoit
    mathieu-benoit committed Jul 24, 2024
    Configuration menu
    Copy the full SHA
    1aec718 View commit details
    Browse the repository at this point in the history

  3. humanitec-operator 0.2.9

    @mathieu-benoit
    mathieu-benoit committed Jul 24, 2024
    Configuration menu
    Copy the full SHA
    d6d6582 View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2024

  1. ingress-nginx - 4.11.2

    @mathieu-benoit
    mathieu-benoit committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    ebd21cf View commit details
    Browse the repository at this point in the history

  2. humanitec-agent - 1.2.6

    @mathieu-benoit
    mathieu-benoit committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    9a30ce0 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2024

  1. email instead of unique_id for Kubernetes RBAC with GSA

    @mathieu-benoit
    mathieu-benoit committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    4657ada View commit details
    Browse the repository at this point in the history

Commits on Sep 24, 2024

  1. Operator 0.2.13

    @mathieu-benoit
    mathieu-benoit committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    910df75 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2024

  1. "internal_ip" = true

    @mathieu-benoit
    mathieu-benoit committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    99e40b7 View commit details
    Browse the repository at this point in the history