-
### Proposal
Make prevention rule set configurable by giving end-users the nobs on a per-rule level so that they can manage what validation should be applied and what not.
This is something we sho…
-
### What would you like to be added?
Current, MutatingWebhookConfiguration can filter whether the current pod enters the webhook stage by configuring the LabelSelector resource, but it is hoped that …
-
While the `Exact` and `Prefix` pathTypes are well-covered by [`strict-validate-path-type`](https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configm…
-
## Bug Report
### What did you do?
Deploy default java-microprofile stack application using kabanero collection, with knative enabled
https://github.com/kabanero-io/sample-java-microprofile
…
-
### Kyverno Version
1.11.4
### Description
Currently, you can get the background controller to crash loop when you do the following:
1. Create a namespace to generate resources into:
```yaml
…
-
I am installing `voyager` via `helm` as a subchart
```yaml
voyager:
enableAnalytics: false
ingressClass: voyager
cloudProvider: baremetal
rbac:
create: true
apiserver:
# en…
-
**Description**
Any resource deployment in the GKE cluster with google KMS enabled failed to be validated. Validation ends with a stack trace (see below)
Short notes on setup: we use GKE with th…
-
Not able to prevent namespace deletion. Below are my OPA Gatekeeper version and constrainttemplate.
OPA gatekeeper version : `v3.15.1`
# Rego Template
```
apiVersion: templates.gatekeeper.sh/v1…
-
### What happened?
Limits applied by LimitRanger to a static Pod are not in effect.
### What did you expect to happen?
Either do apply limits or to not show them in yaml/API and document such behav…
-
see -p flag introduced to switch from default public to default private
https://github.com/ssc-spc-ccoe-cei/gcp-tools/pull/53
shadow https://github.com/ssc-spc-ccoe-cei/gcp-tools/issues/48
Foll…