{"id":16327300,"url":"https://github.com/bryopsida/psa-restricted-patcher","last_synced_at":"2026-01-17T06:54:54.876Z","repository":{"id":177126032,"uuid":"659965052","full_name":"bryopsida/psa-restricted-patcher","owner":"bryopsida","description":"Automatically patches resources on admission to meet PSA restricted requirements","archived":false,"fork":false,"pushed_at":"2024-05-28T08:52:26.000Z","size":807,"stargazers_count":0,"open_issues_count":16,"forks_count":1,"subscribers_count":0,"default_branch":"main","last_synced_at":"2024-05-29T02:30:57.314Z","etag":null,"topics":["auto-patcher","k8s","kubernetes","mutating-admission-webhook","nodejs","pod-security-admission"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bryopsida.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-06-29T00:39:48.000Z","updated_at":"2024-06-10T18:38:49.508Z","dependencies_parsed_at":null,"dependency_job_id":"c0d20587-1273-4de5-9f7f-d8bb195d0177","html_url":"https://github.com/bryopsida/psa-restricted-patcher","commit_stats":null,"previous_names":["bryopsida/psa-restricted-patcher"],"tags_count":9,"template":false,"template_full_name":"curium-rocks/k8s-mutating-webhook","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bryopsida%2Fpsa-restricted-patcher","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bryopsida%2Fpsa-restricted-patcher/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bryopsida%2Fpsa-restricted-patcher/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bryopsida%2Fpsa-restricted-patcher/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bryopsida","download_url":"https://codeload.github.com/bryopsida/psa-restricted-patcher/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246892847,"owners_count":20850850,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["auto-patcher","k8s","kubernetes","mutating-admission-webhook","nodejs","pod-security-admission"],"created_at":"2024-10-10T23:11:01.773Z","updated_at":"2026-01-17T06:54:54.835Z","avatar_url":"https://github.com/bryopsida.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# psa-restricted-patcher\n\n[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher) [![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=coverage)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher) [![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=security_rating)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher) [![Vulnerabilities](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=vulnerabilities)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher) [![Code Smells](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=code_smells)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher) [![Bugs](https://sonarcloud.io/api/project_badges/measure?project=bryopsida_psa-restricted-patcher\u0026metric=bugs)](https://sonarcloud.io/summary/new_code?id=bryopsida_psa-restricted-patcher)\n\n## NPM Scripts\n\nThe following scripts are available\n\n- `lint` lints the source code using eslint\n- `lint:fix` automatically fixes any lint errors that can be fixed automatically\n- `test` uses jest to run test suites\n- `test:e2e` runs e2e test suite, this requires an active helm:deploy\n- `build` compiles the typescript into js and places it in the `dist` folder\n- `build:image` builds the container image\n- `build:docs` builds the api docs\n- `minikube:start` create a minikube k8s cluster\n- `minikube:stop` stop minikube but do not delete\n- `minikube:delete` delete the minikube cluster\n- `helm:addRepos` adds helm repos\n- `helm:deployCertManager` deploy cert-manager for TLS\n- `helm:deploy` deploy the app to k8s using helm\n- `helm:template` print the k8s yaml that would be applied to k8s when using `helm:deploy`\n- `helm:uninstall` remove the app from k8s\n- `helm:uninstallCertManager` remove cert-manager from the k8s cluster\n\n## Deploy it\n\nIf you don't already have cert manager installed you will need to run:\n\n```bash\nhelm repo add jetstack https://charts.jetstack.io \u0026\u0026 helm repo update \u0026\u0026 \\\n  helm upgrade --install --namespace cert-manager --create-namespace \\\n  cert-manager jetstack/cert-manager --set installCRDs=true --debug --wait\n```\n\nAdd the helm repos `helm repo add psa https://bryopsida.github.io/psa-restricted-patcher` fetch updates `helm repo update`.\n\nVerify it worked `helm search repo psa` and you should see something like.\n\n```\nNAME                                                    CHART VERSION   APP VERSION     DESCRIPTION\npsa/psa-restricted-patcher...      0.1.0           0.1.0          ...\n```\n\nDeploy the app `helm upgrade --install starter psa/psa-restricted-patcher`\n\nVerify it worked `kubectl run testpod --image=busybox`, this will be changed, fetch it's yaml `kubectl get testpod -o yaml` you will see its `securityContext`'s have been enhanced.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbryopsida%2Fpsa-restricted-patcher","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbryopsida%2Fpsa-restricted-patcher","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbryopsida%2Fpsa-restricted-patcher/lists"}