issues
search
redhat-na-ssa
/
demo-ai-gitops-catalog
A catalog for all things GitOps for AI on OpenShift
MIT License
10
stars
12
forks
source link
attributes for admission control enforcement
#50
Closed
srcporter
closed
4 months ago
srcporter
commented
4 months ago
Changes to the default ACS admission control configuration:
Enable listening (and enforcement) of policy on Deployment create, update, and edit verbs
Lower the admission control timeout to 10 seconds to ensure that ACS doesn't cause Kube API timeouts
Allow ACS to evaluate image contents (vulnerabilities) in Admission Control (fails open after timeoutSeconds)
Change the collection method to CORE_BPF which will be the default method in ACS 4.4 and later
Changes to the default ACS admission control configuration: