Kyverno Policies Blane Staskiewicz Codeowner Deep Dive

added kindchore teambigbang labels

set weight to 1

assigned to @staskiewicz.blane

added to epic big-bang&244 (closed)

added statusdoing label

changed iteration to Big Bang Iterations Jun 27, 2023 - Jul 10, 2023

removed iteration Big Bang Iterations Jun 27, 2023 - Jul 10, 2023

changed iteration to Big Bang Iterations Jul 11, 2023 - Jul 24, 2023

removed iteration Big Bang Iterations Jul 11, 2023 - Jul 24, 2023

changed iteration to Big Bang Iterations Jul 25, 2023 - Aug 7, 2023

• What is the package's functionality within Big Bang? What is the general architecture of the package?

Kyverno policies is a collection of rules. Each rule consists of a match declaration, an optional exclude declaration, and one of a validate, mutate, generate, or verifyImages declaration. Each rule can contain only a single validate, mutate, generate, or verifyImages child declaration. In Big Bang, Kyverno policies were pulled from the Kyverno Policy Library and converted to a Helm template for flexibility.

• Does the package have high availability/clustering? If so, how does it function/what does it require? Note: you may find this in the architecture doc within Big Bang.

Kyverno contains several different capabilities, decoupled into separate controllers, and each controller runs in its own Kubernetes Deployment. Installing Kyverno in a highly available manner therefore requires additional replicas for each of the chosen controllers.

• How does the BB package differ from the upstream version (if applicable)?

N/A

• What does adequate testing of the package look like? What does the pipeline currently test?

Local testing with the test-values and helm tests. The pipeline tests all policies with kyverno-policies-script-test and bbtests

• Where should you look for package updates and new interesting features to pull into BB?

Upstream repo for Kyverno Policies

mentioned in merge request !79 (merged)

added statusreview label and removed statusdoing label

mentioned in commit 02cbb3e3

closed with merge request !79 (merged)

reopened

mentioned in merge request big-bang/bigbang!2963 (merged)

closed with merge request big-bang/bigbang!2963 (merged)

mentioned in commit big-bang/bigbang@3a362898