privilegedescalation-engineer[bot]
ba508b8fc4
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
77 lines
3.3 KiB
YAML
77 lines
3.3 KiB
YAML
version: "1.0.0"
|
|
name: headlamp-polaris
|
|
displayName: Polaris
|
|
createdAt: "2026-02-05T19:00:00Z"
|
|
description: >-
|
|
Surfaces Fairwinds Polaris audit results inside the Headlamp UI.
|
|
Shows cluster score, check summary, and per-namespace drill-downs
|
|
with per-resource pass/warning/danger breakdowns. Data is fetched
|
|
read-only via the Kubernetes service proxy to the Polaris dashboard.
|
|
Requires a Role granting `get` on `services/proxy` for the
|
|
`polaris-dashboard` service in the `polaris` namespace.
|
|
license: Apache-2.0
|
|
homeURL: "https://github.com/privilegedescalation/headlamp-polaris-plugin"
|
|
appVersion: "10.1.6"
|
|
category: security
|
|
keywords:
|
|
- polaris
|
|
- fairwinds
|
|
- security
|
|
- audit
|
|
- headlamp
|
|
- kubernetes
|
|
links:
|
|
- name: Source
|
|
url: "https://github.com/privilegedescalation/headlamp-polaris-plugin"
|
|
- name: Polaris
|
|
url: "https://polaris.docs.fairwinds.com/"
|
|
install: |
|
|
## Installation
|
|
|
|
### Prerequisites
|
|
|
|
1. [Headlamp](https://headlamp.dev) v0.26.0 or later
|
|
2. [Fairwinds Polaris](https://polaris.docs.fairwinds.com/) installed and the dashboard running in your cluster
|
|
|
|
### Install via Headlamp Plugin Catalog
|
|
|
|
1. Open Headlamp and navigate to **Settings → Plugin Catalog**
|
|
2. Search for **"Polaris"**
|
|
3. Click **Install** and restart Headlamp when prompted
|
|
|
|
The plugin is sourced directly from [ArtifactHub](https://artifacthub.io/packages/headlamp/headlamp/headlamp-polaris).
|
|
|
|
## Usage
|
|
|
|
After installation, the Polaris plugin adds:
|
|
- A **cluster score badge** in the Headlamp app bar
|
|
- A **Polaris** section in the sidebar with the full dashboard and namespace drill-downs
|
|
- An **inline audit panel** on Deployment, StatefulSet, DaemonSet, Job, and CronJob detail pages
|
|
|
|
For more information, see the [README](https://github.com/privilegedescalation/headlamp-polaris-plugin/blob/main/README.md).
|
|
changes:
|
|
- kind: security
|
|
description: Patched 8 npm audit vulnerabilities via pnpm.overrides
|
|
- kind: added
|
|
description: Dual-approval required CI check — PRs must be approved by both CTO and QA before merge
|
|
- kind: added
|
|
description: ExemptionManager test suite — full coverage of annotation-based exemption flows
|
|
- kind: fixed
|
|
description: E2E infrastructure overhauled — ConfigMap volume mount replaces Dockerfile-based approach, tests run in privilegedescalation-dev namespace
|
|
- kind: fixed
|
|
description: E2E workflow uses token auth and waits for HTTP reachability before running tests
|
|
- kind: fixed
|
|
description: Added explicit direct devDependencies (typescript, eslint, prettier, @headlamp-k8s/eslint-config) to prevent phantom dep failures
|
|
- kind: changed
|
|
description: pnpm version pinned via packageManager field; GitHub Actions SHA-pinned via Renovate pinDigests
|
|
- kind: changed
|
|
description: v1.0.0 stable release — plugin API (routes, sidebar, settings schema, app bar action) is stable and will not change without a major version bump
|
|
maintainers:
|
|
- name: privilegedescalation
|
|
email: "chris@farhood.org"
|
|
annotations:
|
|
headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-polaris-plugin/releases/download/v1.0.0/headlamp-polaris-1.0.0.tar.gz"
|
|
headlamp/plugin/version-compat: ">=0.26"
|
|
headlamp/plugin/archive-checksum: sha256:a165e871b40f11a44950aa9f10eb7f7883276f749026ae7a4f886278ecd9bd7d
|
|
headlamp/plugin/distro-compat: "in-cluster,web,desktop"
|