UNCLASSIFIED - NO CUI

Skip to content

Patch releases for #107 (Add `kube-system` namespace exception to all constraints that cause violations)

For Big Bang release 1.12 using "deny" constraints, patch with #107 (closed) fix.

To do this, here is what you need to do:

  • Go get BB release version X
  • Find out the version of OPA Gatekeeper it was using and perform a git checkout on that version
  • Identify if any of the constraints are set to "deny". If not, you are done. Otherwise, continue
  • Create a branch in OPA Gatekeeper off the legacy version
  • Cherry pick the commits from #107 (closed) into OPA Gatekeeper. It should be changes to values.yaml and config.yaml
  • Create a draft MR and test it.
  • Once it is tested, request that a tag be created on your branch. Do not merge to main.
  • Once the tag is created, request the branch and MR be deleted. The tag will make sure the commit remains
  • Create a branch for BB release version X
  • Update the BB branch to use the new OPA tag
  • Create a MR into the release branch and test it.
  • Request a BB owner to create a release on the MR.
Edited by Michael McLeroy