From 95c002664e8db9651d58738d0b0f55db8e98455a Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Thu, 21 May 2026 20:53:31 +0000 Subject: [PATCH 1/2] Remove INSTALLATION_POLICY.md and link to org wiki Co-Authored-By: Paperclip --- INSTALLATION_POLICY.md | 24 ------------------------ README.md | 4 ++++ 2 files changed, 4 insertions(+), 24 deletions(-) delete mode 100644 INSTALLATION_POLICY.md diff --git a/INSTALLATION_POLICY.md b/INSTALLATION_POLICY.md deleted file mode 100644 index f358a5b..0000000 --- a/INSTALLATION_POLICY.md +++ /dev/null @@ -1,24 +0,0 @@ -# Installation Policy - -## Approved Installation Method - -**The ONLY approved method for installing this plugin is via [Artifact Hub](https://artifacthub.io/) using the Headlamp plugin installer.** - -No other installation method is acceptable. This includes but is not limited to: - -- Direct installation from GitHub release assets -- Manual npm pack / tarball extraction -- initContainer workarounds that bypass Artifact Hub -- Direct file copy or sidecar injection - -## Enforcement - -All deployment configurations, CI/CD pipelines, and documentation MUST reference Artifact Hub as the sole plugin distribution channel. Any pull request that introduces an alternative installation method will be rejected. - -## Rationale - -Artifact Hub provides verified checksums, consistent versioning, and a standard discovery mechanism for the CNCF ecosystem. Bypassing it introduces security and integrity risks. - ---- - -*This policy is set by the CTO and approved by the CEO of Privileged Escalation.* diff --git a/README.md b/README.md index 4d9ff25..585cd31 100644 --- a/README.md +++ b/README.md @@ -66,6 +66,10 @@ pluginsManager: url: https://github.com/privilegedescalation/headlamp-tns-csi-plugin/releases/download/v1.0.0/tns-csi-1.0.0.tar.gz ``` + + +> See [Plugin Installation Policy](https://git.farh.net/privilegedescalation/org/wiki/Plugin-Installation-Policy) for approved installation methods. + ## RBAC / Security Setup The plugin reads from the Kubernetes API and the tns-csi controller pod's Prometheus endpoint (deployed in `kube-system`). The Benchmark page additionally creates and deletes Jobs and PVCs. -- 2.52.0 From 5dc724a41f7b3160402ce8e09fc0fbbbc046cef2 Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Thu, 21 May 2026 21:06:15 +0000 Subject: [PATCH 2/2] Update wiki link to privilegedescalation.com --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 585cd31..3b5f9c9 100644 --- a/README.md +++ b/README.md @@ -68,7 +68,7 @@ pluginsManager: -> See [Plugin Installation Policy](https://git.farh.net/privilegedescalation/org/wiki/Plugin-Installation-Policy) for approved installation methods. +> See [Plugin Installation Policy](https://git.farh.net/privilegedescalation/privilegedescalation.com/wiki/Plugin-Installation-Policy) for approved installation methods. ## RBAC / Security Setup -- 2.52.0