Skip to content

Commit

Permalink
matchConditions is already implemented
Browse files Browse the repository at this point in the history
Signed-off-by: Víctor Cuadrado Juan <2196685+viccuad@users.noreply.github.com>
  • Loading branch information
viccuad authored Sep 9, 2024
1 parent 5449991 commit ca656f6
Showing 1 changed file with 1 addition and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -111,6 +111,7 @@ Notice the commented numbers on both the YAML manifests. Let's expand on them:
| 5 | `validationActions` | `mode` | `mode` has as options `protect` and `monitor`. Auditing is more full featured in Kubewarden, see (7). |
| 6 | `matchResources` | `namespaceSelector`, `objectSelector` | Define ways to constraint using Selectors. Kubewarden's policies have them as `namespaceSelector` and `objectSelector`. |
| 7 | `auditAnnotations` | `backgroundAudit`, annotations | These Kubewarden fields set the policy usage in [Audit Scanner](../../../explanations/audit-scanner), and its category and severity for PolicyReports. |
| | `matchConditions` | `matchConditions` | Kubewarden's policies have `matchConditions`. |
| | `---` | Kubewarden-only features | For other features, see the rest of tutorial CEL examples. |

:::tip
Expand All @@ -124,8 +125,6 @@ This is described inside of [this howto](../../../howtos/vap-migration).
There are some VAP features that aren't yet implemented. If look forward to them, please get in contact with us. These are:

- VAP [authorizer library](https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz).
- VAP [matchConditions](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/#matching-requests-matchconditions)
(`spec.matchConditions`).
- VAP [Parameters](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/#parameter-resources)
(ValidatingAdmissionPolicy `spec.paramKind` & ValidatingAdmissionPolicyBinding `spec.paramRef`).
- VAP [Audit Annotations](https://kubernetes.io/docs/reference/labels-annotations-taints/audit-annotations/)
Expand Down

0 comments on commit ca656f6

Please sign in to comment.