Gatekeeper Update volume-types to deny

Package Owner Merge Request

Package Changes

• Updated constraint volume-types enforcement to default deny
• Added exemption for monitoring, logging and twistlock namespace

Links to all MRs that are associated with this change are required.

• https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/merge_requests/71

If the package is set up for releases, also link the package release page for the new tag here.

Additional Details

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/44

changed milestone to %1.13.0

added statusreview label

removed statusreview label

marked this merge request as draft

changed title from Gatekeeper: Update volume-types to deny to Draft: Gatekeeper Update volume-types to deny

Not passing build so reverting label

added statusdoing label

all-packages does not currently work. Need to put each individual package as a label on the MR

added 1 commit

• 23a63c3f - exempt kube-system

Compare with previous version

marked this merge request as ready

Mattermost is currently not passing in the pipeline. Locally, getting this error;

  Warning  FailedCreate  57s (x15 over 2m20s)  replicaset-controller  Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [allowed-docker-registries] container <init-check-database> has an invalid repository for  image  <postgres:13>, allowed repos are ["registry1.dso.mil", "registry.dso.mil"]

https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/670 should fix it.

added anchore argocd authservice clusterAuditor eckoperator elasticsearch fluentbit flux gatekeeper gitlab gitlabRunner haproxy istio jaeger kiali logging mattermost mattermostoperator minio minioOperator monitoring nexus sonarqube twistlock velero labels

mentioned in merge request !696 (merged)

added 14 commits

• 23a63c3f...ae6a0d70 - 12 commits from branch master
• f178a82a - move constraint values to BB
• aaaa19a2 - exempt kube-system

Compare with previous version

added 1 commit

• bf060a58 - re-order

Compare with previous version

added statusreview label and removed statusdoing label

resolved all threads