XenitAB / gatekeeper-library

Collection of OPA Gatekeeper policies that can be used in your Kubernetes cluster.
MIT License
14 stars 7 forks source link

Exclude flux-system from flux constraints #36

Closed phillebaba closed 3 years ago

phillebaba commented 3 years ago

By default the flux-system namespace should be exluded from the flux constraints. This is to avoid breaking flux-system as it does not have a service account set. Additionally flux-system is a admin namespace which should have greater access to the cluster.