Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix AWS permissions for Kubernetes Response Engine #465

Merged
merged 6 commits into from
Nov 20, 2018
Merged

Fix AWS permissions for Kubernetes Response Engine #465

merged 6 commits into from
Nov 20, 2018

Commits on Nov 12, 2018

  1. Fix script documentation and parameters

    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    e321d7c View commit details
    Browse the repository at this point in the history

  2. Honor the principle of least privilege for AWS deployment 

    Configure needed permisssions instead of using one too permissive.
    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    4696519 View commit details
    Browse the repository at this point in the history

  3. Honor the principle of least privilege for CNCF deployment 

    Instead of giving a lot of permissions set only the needed ones
    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    1da02bf View commit details
    Browse the repository at this point in the history

  4. Use deploy as target instead of name 

    Maintain consistency between deployments
    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    e15ee1d View commit details
    Browse the repository at this point in the history

  5. Use a newly created system account instead of my personal one 

    This restricts attack surface, and work better in term of automation.
    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    c24fa32 View commit details
    Browse the repository at this point in the history

  6. Put RBAC configuration together 

    Although it duplicates some code, we prefer duplicate some code and
place this files together.
    @nestorsalceda
    nestorsalceda committed Nov 12, 2018
    Configuration menu
    Copy the full SHA
    1308d7f View commit details
    Browse the repository at this point in the history