damgahq/damga

sealed-secrets: the sealing key is the one secret nothing backs up about 4 hours ago

documentation enhancement help wanted

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

a deploy cannot be followed from the API call to the running pod about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

one quota, hand-written, for the only tenant that exists about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

there is no way to add a second person to a tenant about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

`approve-kubelet-certs.sh` approves every kubelet serving CSR it finds about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

etcd has no encryption at rest: every Secret is base64 on disk about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

backups: verified, rehearsed, and in the same failure domain as the database about 4 hours ago

enhancement help wanted

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

alerting: the Alertmanager receiver is `null`, so no alert is ever delivered about 4 hours ago

enhancement help wanted good first issue

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

docs: a guided first hour after `make up` about 4 hours ago

documentation good first issue

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

docs: the README and CONTROL-PLANE.md predate the write path and the panel about 4 hours ago

documentation good first issue

damgahq/damga

0

A Kubernetes application platform built so every deploy can be proved: a Workload CRD that renders hardened deployments, admission policies with tests that prove they reject, keyless-signed images verified at admission, and backups verified on a schedule. Reconciled from git.

Go

#admission-controller#argocd#cosign#devsecops#gitops#helm#kubebuilder#kubernetes#kubernetes-operator#kyverno#platform-engineering#policy-as-code#prometheus#sigstore#supply-chain-security#terraform

Open Issues Need Help