search

kubewarden / helm-charts

Helm charts for the Kubewarden project
Apache License 2.0
25 stars 17 forks source link

Ensure the policy-server has enough rights to list contextual resources #4

Closed ereslibre closed 3 years ago

ereslibre commented 3 years ago

The policy-server today is fetching a list of well known (and static) resources, being:

Until we make this configurable and extendable with custom resources, the policy-server needs to have enough rights in the Kubernetes cluster to list this resources, so context-aware policies can use this information to take contextual decisions (or perform contextual-aware mutations).

Acceptance criteria

flavio commented 3 years ago

I think this can be closed now, isn't it?

ereslibre commented 3 years ago

No, I'm still working on this. We have to grant access.

ereslibre commented 3 years ago

Despite the serviceAccount should be set now to policy-server, for some reason, the deployment created for the policy-server by the controller has the default SA yet. Looking into it.

ereslibre commented 3 years ago

https://github.com/kubewarden/helm-charts/pull/6 updated.