GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit

Add New Constraint to Check for Naming Requirements on Service Accounts

Open
#431 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
36
Forks
26
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
Currently there are no validation checks for Service Accounts in the Gatekeeper policy library. This has lead to instances where deployed Service Accounts provision but stay in a "unhealthy" state. This can lead to confusion and requires the user to drop down to `kubectl` and inspect the object directly which is not always the obvious thing to do.

**Describe the solution you'd like**
Add a naming convention policy for Service Accounts to the existing `gatekeeper-policies` package.

**Describe alternatives you've considered**
Improve documentation on debugging broken or misbehaving objects. This should be done as well.

**Additional context**
Naming convention --> https://cloud.google.com/iam/docs/service-accounts-create#creating

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.