Krzysztof Ostrowski

Request Headers: Change wait logic, add more debugging data to post mortem

15

## What - Reuse util solution, rather than custom logic - Add more information to state-of-the-cluster during test run and especially on failure ## Why We are trying to identify...

#### What is this PR About? Discourages customers to use openshift-prefixed-namespaces. Creating an OpenShift pre-fixed namespace will break in the future, if the namespace is not labeled manually. With the...

**What type of PR is this?** /kind enhancement **What does this PR do / why we need it**: It is necessary to set the seccompProfile to RuntimeDefault to meet the...

PSA: add restricted labels to openshift-gitops namespace

6

**What type of PR is this?** /kind enhancement **What does this PR do / why we need it**: Add pod security policy restricted to the openshift-gitops namespace. openshift-prefixed namespaces are...

## What Bump dependencies to higher versions. Most prominent: k8s v1.29.3 ## Why It makes sense to stay up to date with deps. In particular it should fix the CVE...

Sig-Auth Pre-Acceptance 2nd Review

10

# What Issues collected during the second round of review with @enj. # Why kube-rbac-proxy should become a project owned by Kubernetes. # Issues `cmd/kube-rbac-proxy/app/kube-rbac-proxy.go`: - [x] #317 - [x]...

Don't log TLS handshake error on health-probe-connections

1

# What Add flag that silences logs for shallow tcp connections that are opened and closed. # Why haproxy makes health probes by opening tcp connections and closing them. kube-rbac-proxy...

Sig-Auth Post-Acceptance TODOs

1

- [ ] Consider updating `tls-reload-interaval` with k8s.io/apiserver code as it auto-reloads TLS ([link](https://github.com/brancz/kube-rbac-proxy/pull/162#discussion_r809242286), [link](https://github.com/brancz/kube-rbac-proxy/pull/162#discussion_r840662155)) - [ ] Consider checking for the audience in the token provided ([link](https://github.com/brancz/kube-rbac-proxy/pull/162#discussion_r809245216)). - [...

AUTH-527: security/v1 - add constant for enforcing psa annotation

4

## What Add an annotation constant that reveals what the label syncer would enforce. ## Why It is unclear what the label syncer would set, if alert labels are set...