Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integration with k8s Validating Admission Policy for audit #2682

Closed
ritazh opened this issue Apr 5, 2023 · 3 comments
Closed

Integration with k8s Validating Admission Policy for audit #2682

ritazh opened this issue Apr 5, 2023 · 3 comments
Labels
enhancement New feature or request
Milestone

Comments

@ritazh
Copy link
Member

ritazh commented Apr 5, 2023

Describe the solution you'd like
[A clear and concise description of what you want to happen.]

https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

This is now possible with the multi-agent support in framework.

Environment:

  • Gatekeeper version:
  • Kubernetes version: (use kubectl version):
@ritazh ritazh added the enhancement New feature or request label Apr 5, 2023
@ritazh ritazh added this to the v3.13.0 RC milestone Apr 5, 2023
@ritazh
Copy link
Member Author

ritazh commented May 17, 2023

There are two components to this:

  1. audit: it is currently blocked on container-runtime v0.15.0 release in order to add K8sNativeValidation (cel) as a driver
    2. admission (GK controller to create ValidatingAdmissionPoicy resources from CT and constraints): this can start now

@sozercan
Copy link
Member

@ritazh
Copy link
Member Author

ritazh commented Jul 12, 2023

1 is addressed by #2819

@ritazh ritazh changed the title Integration with k8s Validating Admission Policy Integration with k8s Validating Admission Policy for audit Jul 12, 2023
@ritazh ritazh closed this as completed Jul 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants