UNCLASSIFIED - NO CUI

Gatekeeper Prevents Gitlab From Installing If Kas Is Enabled

When installing gitlab with gatekeeper enabled, I see this error:

  Warning  InstallFailed       5m28s                 helm-controller  Helm install failed for release gitlab/gitlab with chart gitlab@9.8.2-bb.1: failed to create resource: admission webhook "validation.gatekeeper.sh" denied the request: [https-only] Ingress should be https. tls configuration and allow-http=false annotation are required for gitlab-kas

The policy preventing this is 14_K8sHttpsOnly.yaml

We disable ingress by default for the sub-charts. We need to follow the same pattern and disable ingress for the kas subchart.

Edited by Michael Martin