Draft: Resolve "SPIKE: Research/Test enabling driftDetection"
Package Merge Request
Package Changes
Testing setting spec.driftDetection: {{ .Values.flux.diftDetection }}
to enabled for every helmRelease file in bigbang/chart/templates/[package]/helmrelease.yaml
Package MR
N/A
For Issue
Closes #2001 (closed)
Upgrade Notices
Addedspec.driftDetection: {{ .Values.flux.diftDetection }}
to enable driftDetection (and therefore, drift prevention) as a security benefit ensuring that if bad actors manage to weaken cluster security posture by making an ad-hoc change via the Kubernetes API, those changes won't persist beyond Flux's reconciliation period.
Closes #2001 (closed)
Edited by Jacob Kershaw