Skip to content
This repository was archived by the owner on Dec 18, 2025. It is now read-only.

Add K3s self-security assessment - #1500

Open
OrlinVasilev wants to merge 6 commits into
cncf:mainfrom
OrlinVasilev:k3s-self-sec
Open

OrlinVasilev wants to merge 6 commits into
cncf:mainfrom
OrlinVasilev:k3s-self-sec

Conversation

@OrlinVasilev

Copy link
Copy Markdown

K3s project is getting itself prepared for the Incubation phase. We are completing our first self-assessment.

Signed-off-by: Orlix <orlin@orlix.org>
@netlify

netlify Bot commented Nov 10, 2025 •

Copy link
Copy Markdown

✅ Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit 5013b25
🔍 Latest deploy log https://app.netlify.com/projects/tag-security/deploys/69319985c0e0d700096609fe
😎 Deploy Preview https://deploy-preview-1500--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@JustinCappos JustinCappos left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have a few minor requests. It looks good overall. Can you fix these and we'll merge?

Comment thread community/assessments/projects/k3s/self-assessment.md Outdated
Comment thread community/assessments/projects/k3s/self-assessment.md Outdated
Comment thread community/assessments/projects/k3s/self-assessment.md Outdated
Comment thread community/assessments/projects/k3s/self-assessment.md Outdated
brandond and others added 2 commits November 22, 2025 00:46
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Update K3s self-assessment based on initial TAG review
@OrlinVasilev

Copy link
Copy Markdown
Author

Hi @JustinCappos all comments are addressed and provided update by @brandond.
Can you please review again!

Comment thread community/assessments/projects/k3s/self-assessment.md Outdated

@JustinCappos JustinCappos left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One more minor fix ("fully certified" is ???) and I think it's ready to merge.

@brandond

Copy link
Copy Markdown

@JustinCappos it looks like you resolved that discussion so I had to go hunting for it - but see #1500 (comment)

@JustinCappos

Copy link
Copy Markdown
Collaborator

@JustinCappos it looks like you resolved that discussion so I had to go hunting for it - but see #1500 (comment)

I think this may just be my lack of understanding in the kubernetes landscape. Seems like this should be fine to merge then.

@JustinCappos JustinCappos left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to merge. Would require a bit of work for a joint assessment, but is in a decent shape.

@JustinCappos

Copy link
Copy Markdown
Collaborator

FYI: the linter and spell checking are failing. Can you fix those please?

@OrlinVasilev @brandond

@brandond

brandond commented Dec 2, 2025

Copy link
Copy Markdown

It looks like we'll need to add some words to the word list; is that acceptable?

@JustinCappos

Copy link
Copy Markdown
Collaborator

It looks like we'll need to add some words to the word list; is that acceptable?

Yes, go ahead!

@JustinCappos

Copy link
Copy Markdown
Collaborator

It looks like we'll need to add some words to the word list; is that acceptable?

Yes, go ahead!

@jkjell @evankanderson @mnm678 notifying you in case there is an objection...

Signed-off-by: Orlix <orlin@orlix.org>
Signed-off-by: Orlix <orlin@orlix.org>
Signed-off-by: Orlix <orlin@orlix.org>

@evankanderson evankanderson left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still approving, but rewriting the entire extra words dictionary to case insensitive was a little hard to review.

Comment thread ci/spelling-config.json
],
"words": [
"ABAC",
"addfetnetgrent",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where is this "word" used (out of curiosity)?

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@evankanderson it's in the original file as well - "addfetnetgrent",

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

search didn't show it anywhere though, happy to remove it :)

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@evankanderson do you want me to clean this up or we keep it as it was before ?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @OrlinVasilev, you might want to just bypass this repo and its checks, and put the document directly into it's long-term home instead: https://github.com/cncf/toc/tree/main/projects/k3s

ref: https://github.com/cncf/tag-security/blob/main/.github/pull_request_template.md

Comment thread ci/spelling-config.json
@brandond

brandond commented Dec 5, 2025

Copy link
Copy Markdown

Now we just need to satisfy the markdown style linter...

This branch has not been deployed

No deployments
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants