heathcliff26 / kube-upgrade

74%

LAST BUILD ON BRANCH main

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• api-camel-case
• api-semver
• api-upgrade
• author-label
• bind-mount
• bump-controller-runtime
• bump-dependencies
• ci-concurrency
• ci-permissions
• cleanup-tmp-dir-kubeadm
• control-resource-limits
• controller-cache
• controller-pin
• copilot/fix-spelling-mistakes
• coveralls
• cr-warnings
• daemonset-controller
• delete-migration-code
• delete-old-api
• deprecate-v1alpha1
• docker-version
• dockerfile-casing
• e2e-delete-finalize
• e2e-ubuntu-latest
• experimental
• fake-clientset-k8s
• fix-gosec-alerts
• fix-upgraded-defaults
• generate-manifests
• go-tools
• go1.24
• go1.24-version
• gosec
• heathcliff26-patch-1
• helm-chart
• helm-fleetlock
• helm-manifests
• improve-logging
• kubeadm-first
• main
• make-clean
• make-cli-tools
• make-help
• nobody
• node-watch
• owner
• release-workflow
• releasenotes-generation
• remove-finalizer-migration
• remove-generated-client
• remove-release-env
• rename-e2e
• renovate-trim
• renovate/all-gomod-dependencies
• renovate/docker.io-library-golang-1.x
• renovate/fleetlock-1.x
• renovate/ghcr.io-sigstore-cosign-cosign-3.x
• renovate/major-all-gomod-dependencies
• renovate/quay.io-fedora-fedora-44.x
• renovate/quay.io-fedora-fedora-45.x
• replace-yaml
• repo-sync/ci/main
• resoruce-limits
• rpm-ostree-driver
• rpm-ostree-status
• security-context
• sigstore-kubeadm
• single-instance
• slog-switch
• test-context
• tolerations
• unit-test-script
• update-frequency
• update-gomod
• update-only-when-needed
• update-readme
• update-release-workflow
• upgraded-chroot-utils
• upgraded-config
• upgraded-env-variable-name
• upgraded-image
• upgraded-lock
• upgraded-resource-limit
• upgraded-retry-interval
• validate-deps
• verified-ostree
• webhook-service
• workflow-trigger
• yaml-validation

Build # 23806299480

Build Type

push

github

Committed by heathcliff26

Commit Message

Harden deployments through security context

Harden controller through hardcoding the securityContext.
Make upgraded root filesystem readonly.

Signed-off-by: Heathcliff <heathcliff@heathcliff.eu>

Run Details

12 of 12 new or added lines in 1 file covered. (100.0%)

1184 of 1599 relevant lines covered (74.05%)

11.49 hits per line