Kyverno Policy Exceptions for Certain Gitlab Pods

Package Merge Request

Package Changes

https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/blob/6.0.1-bb.3/CHANGELOG.md

https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/blob/6.0.1-bb.4/CHANGELOG.md

Package MR

https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/merge_requests/143

https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/merge_requests/144

For Issue

Closes https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/-/issues/129

BB Processes

Add labels for affected packages so that they are deployed in CI as well as a status label:

Be sure to assign to yourself:

Once it is ready for review switch the status and assign reviewers:

added gitlab statusreview labels

assigned to @project_2872_bot2

changed the description

requested review from @micah.nagel, @BrandenCobb, and @ryan.j.garcia

removed statusreview label

changed the description

removed review request for @ryan.j.garcia

assigned to @ryan.j.garcia

added statusdoing label

added 1 commit

• 6843cb7c - Adding Gitlab redis and minio exceptions to kyverno

Compare with previous version

added 1 commit

• 4697c05e - Update Gitlab to bb.4 in values.yaml

Compare with previous version

changed the description

marked this merge request as ready

changed title from Updated gitlab git tag to Kyverno Policy Exceptions for Certain Gitlab Pods

changed milestone to %1.38.0

added statusreview label and removed statusdoing label

requested review from @michaelmcleroy

I would like our CI environment to be secure as well as the default values. Is there a way to pass values into either chart for running it as root and dropping capabilities? If we are certain its for CI only, we can add them to just test_values.yaml

approved this merge request

unapproved this merge request

added stale label

added 1 commit

• 2d375b0b - Move gitlab-minio exceptions to test, update redis comment

Compare with previous version

approved this merge request

resolved all threads

enabled an automatic merge when the pipeline for 2d375b0b succeeds

merged

mentioned in commit d7230087