GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
Add New Constraint to Check for Naming Requirements on Service Accounts
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
Currently there are no validation checks for Service Accounts in the Gatekeeper policy library. This has lead to instances where deployed Service Accounts provision but stay in a "unhealthy" state. This can lead to confusion and requires the user to drop down to `kubectl` and inspect the object directly which is not always the obvious thing to do.
**Describe the solution you'd like**
Add a naming convention policy for Service Accounts to the existing `gatekeeper-policies` package.
**Describe alternatives you've considered**
Improve documentation on debugging broken or misbehaving objects. This should be done as well.
**Additional context**
Naming convention --> https://cloud.google.com/iam/docs/service-accounts-create#creating
Contributor guide
Assessment
This issue has not been assessed yet.