UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

feat(gatekeeper): upgrade to 3.5.1

Merged feat(gatekeeper): upgrade to 3.5.1
opa-gatekeeper-3.5.1 into master
Merged Michael McLeroy requested to merge opa-gatekeeper-3.5.1 into master

Package Owner Merge Request

Package Changes

  • Upgrades OPA Gatekeeper to 3.5.1
  • Adds upgrade option to Helm Release to force CRD and Constraint upgrades
  • Adds exceptions overrides for packages (moving from OPA to Big Bang)
  • Moves restricted taint constraint to "Deny"

Releases

Merge Requests

Additional Details

Default constraint exceptions will not be moved to Big Bang for the following reasons:

  • Big Bang can control the exceptions based on whether the package needing the exception is enabled
  • OPA Gatekeeper has no knowledge of namespaces, containers, etc. in Big Bang
  • All of the exceptions and justifications will be located in one place

Known issues or expected conflicts?

During testing, we had some intermittent problems getting the CRDs to update. The options added to HelmRelease have fixed that so far. But, since it was intermittent, it may be that we were just lucky.

Edited by Michael McLeroy

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
Please register or sign in to reply

UNCLASSIFIED - NO CUI