mirror of
https://github.com/HackTricks-wiki/hacktricks-cloud.git
synced 2025-12-29 06:03:26 -08:00
MIGRATION TYPOS
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
|
||||
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
|
||||
|
||||
## Definition 
|
||||
## Definition
|
||||
|
||||
Kyverno is an open-source, policy management framework for Kubernetes that enables organizations to define, enforce, and audit policies across their entire Kubernetes infrastructure. It provides a scalable, extensible, and highly customizable solution for managing the security, compliance, and governance of Kubernetes clusters.
|
||||
|
||||
|
||||
@@ -25,15 +25,15 @@ For each ClusterPolicy and Policy, you can specify a list of excluded entities,
|
||||
|
||||
These excluded entities will be exempt from the policy requirements, and Kyverno will not enforce the policy for them.
|
||||
|
||||
## Example 
|
||||
## Example
|
||||
|
||||
Let's dig into one clusterpolicy example : 
|
||||
Let's dig into one clusterpolicy example :
|
||||
|
||||
```
|
||||
$ kubectl get clusterpolicies MYPOLICY -o yaml
|
||||
```
|
||||
|
||||
Look for the excluded entities : 
|
||||
Look for the excluded entities :
|
||||
|
||||
```yaml
|
||||
exclude:
|
||||
@@ -53,7 +53,7 @@ Within a cluster, numerous added components, operators, and applications may nec
|
||||
|
||||
## Abusing ValidatingWebhookConfiguration
|
||||
|
||||
Another way to bypass policies is to focus on the ValidatingWebhookConfiguration resource : 
|
||||
Another way to bypass policies is to focus on the ValidatingWebhookConfiguration resource :
|
||||
|
||||
{{#ref}}
|
||||
../kubernetes-validatingwebhookconfiguration.md
|
||||
|
||||
@@ -51,7 +51,7 @@ With a comprehensive overview of the Gatekeeper configuration, it's possible to
|
||||
|
||||
## Abusing ValidatingWebhookConfiguration
|
||||
|
||||
Another way to bypass constraints is to focus on the ValidatingWebhookConfiguration resource : 
|
||||
Another way to bypass constraints is to focus on the ValidatingWebhookConfiguration resource :
|
||||
|
||||
{{#ref}}
|
||||
../kubernetes-validatingwebhookconfiguration.md
|
||||
|
||||
@@ -37,7 +37,7 @@ webhook:
|
||||
- pods
|
||||
```
|
||||
|
||||
The main difference between a ValidatingWebhookConfiguration and policies : 
|
||||
The main difference between a ValidatingWebhookConfiguration and policies :
|
||||
|
||||
<figure><img src="../../images/Kyverno.png" alt=""><figcaption><p>Kyverno.png</p></figcaption></figure>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user