DevContainer User
034e0b9db8
Add missing config files (.eslintrc.js, .prettierrc.js, .pluginrc, .mcp.json, renovate.json), documentation (CLAUDE.md, CONTRIBUTING.md, README.md, SECURITY.md, LICENSE), CI/CD workflows (ci.yaml, release.yaml), and Claude agent definitions. Rename package from headlamp-intel-gpu-plugin to intel-gpu to match the short-name convention used by all other plugins. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
23 lines
642 B
Markdown
23 lines
642 B
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
| Version | Supported |
|
|
|---------|-----------|
|
|
| latest | Yes |
|
|
|
|
## Plugin Scope
|
|
|
|
This plugin is **read-only**. It does not perform any write operations against the Kubernetes cluster. It reads:
|
|
|
|
- Nodes
|
|
- Pods (all namespaces)
|
|
- GpuDevicePlugin CRDs (`deviceplugin.intel.com/v1`)
|
|
- Prometheus metrics (via API proxy in `monitoring` namespace)
|
|
|
|
All data is fetched through Headlamp's built-in API proxy, which respects the user's existing RBAC permissions.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please report security vulnerabilities by opening a private issue or emailing the maintainers directly.
|