Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
cherrymu authored Aug 21, 2024
1 parent 4f5ec67 commit c61df0d
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,8 @@ tofu destroy
- [x] Usage of infrastructure-as-code tool (OpenTofu) to provision local KIND cluster
- [x] Security scanners implementation using Trivy during the build process


## Assumptions
After building the application from the CI pipeline, deploy it manually using helm on any k8s distribution

## Project Highlights/Features
1. Modular Golang code with Separate HTTP handlers and telemetry into different files for better organization and error handling.
Expand All @@ -98,4 +99,4 @@ tofu destroy
- Use an ingress gateway like Istio to route the traffic inside the cluster securely with more granularity and access control for the backend services with claims and policies.
- Use ArgoCD/Flux to deploy and manage applications more efficiently
- Extend OpenTofu configuration to automate installation of pre-requisites tools.
- Use [sigstore policy controller](https://github.com/sigstore/policy-controller) to enforce a strict image policy such that only signed and verified images will be allowed to deploy in a namespace and other images will be rejected by the admission webhook controller.
- Use [sigstore policy controller](https://github.com/sigstore/policy-controller) to enforce a strict image policy such that only signed and verified images will be allowed to deploy in a namespace and other images will be rejected by the admission webhook controller.

0 comments on commit c61df0d

Please sign in to comment.