kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Add schema check to custom constraints, SCC custom modules, and observability configurations, along with their respective schema definitions. (#3705)

Browse Source
This commit is contained in:
Liam Nesteroff
2026-02-05 22:20:25 +11:00
committed by GitHub
parent 2af44b0651
commit 9debc3df6f
137 changed files with 1087 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
fast/stages/0-org-setup/datasets/hardened/observability/auditConfigChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
auditConfigChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/binaryAuthorizationPolicyChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
binaryAuthorizationPolicyChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/cloudsqlInstanceChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
cloudsqlInstanceChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/customRoleChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
customRoleChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/firewallPolicyRuleChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
firewallPolicyRuleChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/firewallRuleChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
firewallRuleChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/networkChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
networkChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/networkRouteChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
networkRouteChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/projectOwnershipChange.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
projectOwnershipChange:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/observability/storageIamChanges.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../schemas/observability.schema.json
alerts:
storageIamChanges:
combiner: OR

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.accesscontextmanagerDisableBridgePerimeters.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.accesscontextmanagerDisableBridgePerimeters:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudbuildDisableWorkerPoolExternalIP.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudbuildDisableWorkerPoolExternalIP:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudkmsAllowedAlgorithms.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudkmsAllowedAlgorithms:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudkmsAllowedProtectionLevel.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudkmsAllowedProtectionLevel:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudkmsAllowedRotationPeriod.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudkmsAllowedRotationPeriod:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudrunDisableEnvironmentVariablePattern.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudrunDisableEnvironmentVariablePattern:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudrunJobDisableDefaultServiceAccount.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudrunJobDisableDefaultServiceAccount:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudrunJobRequireBinaryAuthorization.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudrunJobRequireBinaryAuthorization:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudrunServiceDisableDefaultServiceAccount.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudrunServiceDisableDefaultServiceAccount:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudrunServiceRequireBinaryAuthorization.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudrunServiceRequireBinaryAuthorization:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlDisablePublicAuthorizedNetworks.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlDisablePublicAuthorizedNetworks:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlEnforcePasswordComplexity.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlEnforcePasswordComplexity:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireAutomatedBackup.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireAutomatedBackup:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireHighAvailability.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireHighAvailability:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireMySQLDatabaseFlags.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireMySQLDatabaseFlags:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequirePointInTimeRecovery.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequirePointInTimeRecovery:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequirePostgreSQLDatabaseAdditionalFlags.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequirePostgreSQLDatabaseAdditionalFlags:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequirePostgreSQLDatabaseFlags.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequirePostgreSQLDatabaseFlags:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireRootPassword.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireRootPassword:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireSQLServerDatabaseFlags.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireSQLServerDatabaseFlags:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.cloudsqlRequireSSLConnection.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.cloudsqlRequireSSLConnection:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dataprocDisableDefaultServiceAccount.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dataprocDisableDefaultServiceAccount:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dataprocRequireDiskCmekEncryption.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dataprocRequireDiskCmekEncryption:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dataprocRequireInternalIp.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dataprocRequireInternalIp:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dataprocRequireKerberos.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dataprocRequireKerberos:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dnsAllowedSigningAlgorithms.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dnsAllowedSigningAlgorithms:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dnsRequireManageZoneDNSSEC.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dnsRequireManageZoneDNSSEC:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.dnsRequirePolicyLogging.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.dnsRequirePolicyLogging:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallEnforcePolicyRuleLogging.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallEnforcePolicyRuleLogging:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallEnforceRuleLogging.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallEnforceRuleLogging:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRequireDescription.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRequireDescription:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictCacheSearchDatabasesPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictCacheSearchDatabasesPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictCacheSearchDatabasesRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictCacheSearchDatabasesRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictDirectoryServicesPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictDirectoryServicesPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictDirectoryServicesRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictDirectoryServicesRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictExplicitAllPortsPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictExplicitAllPortsPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictExplicitAllPortsRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictExplicitAllPortsRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictInsecureProtocolsPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictInsecureProtocolsPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictInsecureProtocolsRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictInsecureProtocolsRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictMailProtocolsPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictMailProtocolsPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictMailProtocolsRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictMailProtocolsRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictManagementPortsPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictManagementPortsPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictManagementPortsRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictManagementPortsRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictNetworkServicesPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictNetworkServicesPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictNetworkServicesRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictNetworkServicesRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictNoSQLDatabasesPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictNoSQLDatabasesPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictNoSQLDatabasesRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictNoSQLDatabasesRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictPublicAccessPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictPublicAccessPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictPublicAccessRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictPublicAccessRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictRdpPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictRdpPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictRdpRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictRdpRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictSQLDatabasesPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictSQLDatabasesPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictSQLDatabasesRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictSQLDatabasesRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictSshPolicyRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictSshPolicyRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.firewallRestrictSshRule.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.firewallRestrictSshRule:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeAllowedNodePoolImages.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeAllowedNodePoolImages:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeAllowedReleaseChannels.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeAllowedReleaseChannels:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeDisableAlphaCluster.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeDisableAlphaCluster:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeDisableKubernetesDashboard.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeDisableKubernetesDashboard:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeDisableLegacyAbac.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeDisableLegacyAbac:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeDisableLegacyMetadataEndpoints.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeDisableLegacyMetadataEndpoints:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireCOSImage.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireCOSImage:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireConfidentialNodes.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireConfidentialNodes:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireDataplaneV2.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireDataplaneV2:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireGKEMetadataServer.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireGKEMetadataServer:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireIntegrityMonitoring.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireIntegrityMonitoring:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireIntraNodeVisibility.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireIntraNodeVisibility:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireMasterAuthorizedNetworks.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireMasterAuthorizedNetworks:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireMonitoring.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireMonitoring:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireNodePoolAutoRepair.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireNodePoolAutoRepair:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireNodePoolAutoUpgrade.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireNodePoolAutoUpgrade:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireNodePoolCMEKEncryption.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireNodePoolCMEKEncryption:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireNodePoolSandbox.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireNodePoolSandbox:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequirePrivateEndpoint.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequirePrivateEndpoint:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireRegionalClusters.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireRegionalClusters:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireSecureBoot.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireSecureBoot:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.gkeRequireVPCNativeCluster.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.gkeRequireVPCNativeCluster:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamAllowedMembers.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamAllowedMembers:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamDisableAdminServiceAccount.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamDisableAdminServiceAccount:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamDisableBasicRoles.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamDisableBasicRoles:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamDisableProjectServiceAccountImpersonationRoles.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamDisableProjectServiceAccountImpersonationRoles:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamDisablePublicBindings.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamDisablePublicBindings:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.iamDisableRedisAdminRoles.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.iamDisableRedisAdminRoles:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.networkDisableTargetHTTPProxy.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.networkDisableTargetHTTPProxy:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.networkDisableWeakSSLPolicy.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.networkDisableWeakSSLPolicy:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.networkRequireBackendServiceLogging.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.networkRequireBackendServiceLogging:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.networkRequireCustomModeVpc.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.networkRequireCustomModeVpc:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.networkRequireSubnetPrivateGoogleAccess.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.networkRequireSubnetPrivateGoogleAccess:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/custom-constraints/custom.storageRequireBucketObjectVersionning.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/custom-constraint.schema.json
custom.storageRequireBucketObjectVersionning:
action_type: DENY
condition: |-

2
fast/stages/0-org-setup/datasets/hardened/organization/scc-sha-custom-modules/artifactregistryRequireCMEK.yaml
View File

@@ -12,6 +12,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# yaml-language-server: $schema=../../../../schemas/scc-sha-custom-modules.schema.json
artifactregistryRequireCMEK:
description: Detect if Artifact Registry repositories are not encrypted using CMEK
predicate:

Some files were not shown because too many files have changed in this diff Show More