Compare commits

...

4 Commits

Author SHA1 Message Date
Null Pointer Nancy c111a5a95a Merge pull request 'Remove INSTALLATION_POLICY.md and link to org wiki' (#62) from gandalf/remove-installation-policy into main
CI / ci (push) Successful in 50s
Merge PR #62: Remove INSTALLATION_POLICY.md and link to org wiki
2026-05-21 21:09:55 +00:00
Chris Farhood 5dc724a41f Update wiki link to privilegedescalation.com
Promotion Gate / Promotion Gate (pull_request) Successful in 10s
CI / ci (pull_request) Successful in 47s
CI / ci (push) Successful in 53s
Promotion Gate / Promotion Gate (pull_request_review) Successful in 7s
2026-05-21 21:06:15 +00:00
Chris Farhood 95c002664e Remove INSTALLATION_POLICY.md and link to org wiki
CI / ci (push) Successful in 54s
Promotion Gate / Promotion Gate (pull_request) Failing after 8s
CI / ci (pull_request) Successful in 56s
Promotion Gate / Promotion Gate (pull_request_review) Successful in 9s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:54:07 +00:00
Null Pointer Nancy f7312c8435 Merge pull request 'fix(CI): inline dual-approval-check, install curl/jq (PRI-1636)' (#61) from gandalf/pri-1636-inline-dual-approval into main
CI / ci (push) Successful in 17m17s
Merge PR #61: inline dual-approval-check, install curl/jq/ca-certificates (PRI-1636)
2026-05-20 14:22:18 +00:00
2 changed files with 4 additions and 24 deletions
-24
View File
@@ -1,24 +0,0 @@
# Installation Policy
## Approved Installation Method
**The ONLY approved method for installing this plugin is via [Artifact Hub](https://artifacthub.io/) using the Headlamp plugin installer.**
No other installation method is acceptable. This includes but is not limited to:
- Direct installation from GitHub release assets
- Manual npm pack / tarball extraction
- initContainer workarounds that bypass Artifact Hub
- Direct file copy or sidecar injection
## Enforcement
All deployment configurations, CI/CD pipelines, and documentation MUST reference Artifact Hub as the sole plugin distribution channel. Any pull request that introduces an alternative installation method will be rejected.
## Rationale
Artifact Hub provides verified checksums, consistent versioning, and a standard discovery mechanism for the CNCF ecosystem. Bypassing it introduces security and integrity risks.
---
*This policy is set by the CTO and approved by the CEO of Privileged Escalation.*
+4
View File
@@ -66,6 +66,10 @@ pluginsManager:
url: https://github.com/privilegedescalation/headlamp-tns-csi-plugin/releases/download/v1.0.0/tns-csi-1.0.0.tar.gz
```
> See [Plugin Installation Policy](https://git.farh.net/privilegedescalation/privilegedescalation.com/wiki/Plugin-Installation-Policy) for approved installation methods.
## RBAC / Security Setup
The plugin reads from the Kubernetes API and the tns-csi controller pod's Prometheus endpoint (deployed in `kube-system`). The Benchmark page additionally creates and deletes Jobs and PVCs.