mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-12 18:00:37 +00:00
19b7b44e20
Fix: the per-page resource search box with maturity tag-pills stopped appearing after navigation.instant was enabled (DOMContentLoaded fires only on first SPA load). Reworked v2_filter.js to init via Material's document$ observable with a DOMContentLoaded fallback, guard double-injection, bind the clickable-tag delegation once, and add a no-results state. Cache-bust ?v=2.9.12. Change: removed the duplicated Markdown "## Table of Contents" from all 156 V2 content pages and from v2_optimizer.py — it forced hundreds of links of scroll on large pages. Replaced by Material's native sticky "On this page" TOC (removed toc.integrate, added toc.follow). tags.md keeps its TOC (it is an index). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
33 lines
3.2 KiB
Markdown
33 lines
3.2 KiB
Markdown
# Security Policy as Code
|
|
|
|
!!! tip "Nubenetes V2 Elite Portal"
|
|
You are browsing the AI-Curated V2 Elite Edition. Looking for the exhaustive list of references? Check out the [**V1 Historical Archive**](/v1/securityascode/).
|
|
|
|
!!! info "Architectural Context"
|
|
Detailed reference for Security Policy as Code in the context of Hardened Infrastructure.
|
|
|
|
## Security
|
|
|
|
### IAM
|
|
|
|
#### Protocols
|
|
|
|
- **(2022)** [curity.io: OAuth 2.0 Overview](https://curity.io/resources/learn/oauth-overview) <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — An industrial-grade review of the OAuth 2.0 protocol specifications, flows, and grant types. Provides system architects with core design criteria to safely establish authorization states between microservice deployments. Underlines secure handling of access, refresh, and id tokens.
|
|
- **(2022)** [curity.io: OpenID Connect Overview](https://curity.io/resources/learn/openid-connect-overview) <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Provides a comprehensive architecture overview of OpenID Connect (OIDC) acting as the authentication layer on top of OAuth 2.0. Analyzes ID token syntax, discovery endpoints, and flows for multi-tenant systems. Essential background knowledge for implementing cloud-native federated identities.
|
|
### Identity and Access
|
|
|
|
#### Spring Security
|
|
|
|
- **(2022)** [freecodecamp.org: How to Implement an OAuth2 Resource Server with Spring Security](https://www.freecodecamp.org/news/oauth2-resourceserver-with-spring-security) <span class='md-tag md-tag--warning'>[JAVA CONTENT]</span> <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — A hands-on implementation tutorial detailing the deployment of an OAuth2-compliant resource server using Spring Security. It guides through configuring middleware to parse and authenticate incoming JWT requests.
|
|
### Policy Enforcement
|
|
|
|
#### Admission Control
|
|
|
|
- **(2022)** [MagTape](https://github.com/tmobile/magtape) <span class='md-tag md-tag--info'>⭐ 152</span> <svg class="v2-sparkline" width="50" height="15" viewBox="0 0 50 15" style="vertical-align: middle; display: inline-block; margin-left: 6px;" title="Activity Trend"><defs><linearGradient id="spark-grad-7aafde66" x1="0" y1="0" x2="1" y2="0"><stop offset="0%" stop-color="rgba(34, 211, 238, 0.2)" /><stop offset="100%" stop-color="var(--md-accent-fg-color)" /></linearGradient></defs><path class="v2-sparkline-path" d="M 0 13 L 10 5 L 20 7 L 30 3 L 40 5 L 50 7" fill="none" stroke="url(#spark-grad-7aafde66)" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" /><circle cx="50" cy="7" r="2" fill="var(--md-accent-fg-color)" /></svg> <span class='md-tag md-tag--warning'>[JAVASCRIPT CONTENT]</span> 🌟🌟 <span class='md-tag md-tag--critical'>[LEGACY]</span> — An admission controller developed by T-Mobile that evaluates resources against organizational policy constraints during creation. Written in Node.js, it offered a lightweight alternative to OPA for specific JSON schema validations. By 2026, it has been largely archived, with developers migrating to Gatekeeper or Kyverno.
|
|
|
|
---
|
|
💡 **Explore Related:** [Ansible](./ansible.md) | [Devsecops](./devsecops.md) | [Terraform](./terraform.md)
|
|
|
|
🔗 **See Also:** [Postman](./postman.md) | [Cloudflare](./cloudflare.md)
|
|
|