Compare commits

...

4 Commits

Author SHA1 Message Date
Null Pointer Nancy 78b32409c8 Merge pull request 'Remove INSTALLATION_POLICY.md and link to org wiki' (#85) from gandalf/remove-installation-policy into main
CI / ci (push) Successful in 51s
Merge PR #85: Remove INSTALLATION_POLICY.md and link to org wiki
2026-05-21 21:09:52 +00:00
Chris Farhood 1e46c6d573 Update wiki link to privilegedescalation.com
CI / ci (push) Successful in 43s
Promotion Gate / Promotion Gate (pull_request) Successful in 9s
CI / ci (pull_request) Successful in 47s
Promotion Gate / Promotion Gate (pull_request_review) Successful in 9s
2026-05-21 21:06:13 +00:00
Chris Farhood 0c332dbb57 Remove INSTALLATION_POLICY.md and link to org wiki
Promotion Gate / Promotion Gate (pull_request) Failing after 10s
CI / ci (push) Successful in 46s
CI / ci (pull_request) Successful in 43s
Promotion Gate / Promotion Gate (pull_request_review) Successful in 9s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:54:06 +00:00
Null Pointer Nancy 58e42f5451 Merge pull request 'fix(CI): inline dual-approval-check, install curl/jq (PRI-1636)' (#84) from gandalf/pri-1636-inline-dual-approval into main
CI / ci (push) Successful in 44s
Merge PR #84: inline dual-approval-check, install curl/jq/ca-certificates (PRI-1636)
2026-05-20 14:22:13 +00:00
2 changed files with 4 additions and 24 deletions
-24
View File
@@ -1,24 +0,0 @@
# Installation Policy
## Approved Installation Method
**The ONLY approved method for installing this plugin is via [Artifact Hub](https://artifacthub.io/) using the Headlamp plugin installer.**
No other installation method is acceptable. This includes but is not limited to:
- Direct installation from GitHub release assets
- Manual npm pack / tarball extraction
- initContainer workarounds that bypass Artifact Hub
- Direct file copy or sidecar injection
## Enforcement
All deployment configurations, CI/CD pipelines, and documentation MUST reference Artifact Hub as the sole plugin distribution channel. Any pull request that introduces an alternative installation method will be rejected.
## Rationale
Artifact Hub provides verified checksums, consistent versioning, and a standard discovery mechanism for the CNCF ecosystem. Bypassing it introduces security and integrity risks.
---
*This policy is set by the CTO and approved by the CEO of Privileged Escalation.*
+4
View File
@@ -50,6 +50,10 @@ Rook-Ceph must be deployed in the `rook-ceph` namespace with standard labels. Th
Browse the Headlamp Plugin Manager (Settings → Plugins → Catalog) and install **headlamp-rook-plugin** directly.
> See [Plugin Installation Policy](https://git.farh.net/privilegedescalation/privilegedescalation.com/wiki/Plugin-Installation-Policy) for approved installation methods.
## RBAC & Security Setup
The plugin reads Rook-Ceph CRDs and Kubernetes resources. Your Headlamp service account needs: