gardener / diki

Apache License 2.0
7 stars 8 forks source link

Consistently use namespaceMatchLabels across rules #286 #315

Closed georgibaltiev closed 1 week ago

georgibaltiev commented 1 week ago

What this PR does / why we need it: This PR refactors the accepted pod structs implemented for rules #242414 and #242415 by aggregating the label matching options into a singular shared structure. The accepted pod struct for #242417 is refactored to utilize the new structure and now can add exemptions from the ruleset checks by matching namespaces by labels. The accepted pod struct for #242383 is refactored as well to use namespace labels for matching its rule exemptions.

Which issue(s) this PR fixes: Fixes #286

Special notes for your reviewer:

Release note:

The implementation is a breaking change that will affect the structure of the .yaml configuration files used by the end users for configuring their accepted pods.