jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-11 00:14:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add Kubernetes multiplayer security baseline

Browse Source
This commit is contained in:
Josh Creek
2026-08-31 21:21:55 +01:00
parent 79e66c7a95
commit 88b5ffedb2
9 changed files with 236 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+5 -3
View File
@@ -57,9 +57,11 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
- [x] Complete the threat model for forgery, replay, queue/flood/bot abuse,
workload/insider compromise, DDoS, supply chain and denial-of-wallet
([THREAT-MODEL.md](docs/THREAT-MODEL.md)).
- [ ] Enforce restricted workloads/RBAC/networks/private stores/backups/secrets;
isolate SDR signing behind an audited non-exportable signer and add
volumetric edge defense, WebSocket limits and overload shedding.
- [ ] **IN PROGRESS:** Enforce restricted workloads/RBAC/networks/private
stores/backups/secrets; isolate SDR signing behind an audited non-exportable
signer and add volumetric edge defense, WebSocket limits and overload
shedding. A provider-neutral restricted Kubernetes baseline and structural
policy tests now exist; live edge/data-plane controls remain.
- [ ] Pin, scan, SBOM and sign artifacts; verify signatures at admission and
document the critical vulnerability SLA.