-
Notifications
You must be signed in to change notification settings - Fork 763
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: update operation generate in deployment yaml and add docs #3738
chore: update operation generate in deployment yaml and add docs #3738
Conversation
Signed-off-by: Jaydip Gabani <gabanijaydip@gmail.com>
website/docs/operations.md
Outdated
|
||
__--operation key:__ `generate` | ||
|
||
This operation serves . |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
incomplete?
website/docs/operations.md
Outdated
* The ability to create CRDs (unfortunately RBAC doesn't have the syntax to scope this down to just CRDs in the `constraints.gatekeeper.sh` group) | ||
* The ability to read all `Constraint` resources (members of the group `constraints.gatekeeper.sh`) | ||
* The ability to read all `ValidatingAdmissionPolicy` objects | ||
* The ability to read all `ValidatingAdmissionPolicyBinding` objects |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
vap and vapb should be "write"?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated it
Signed-off-by: Jaydip Gabani <gabanijaydip@gmail.com>
|
||
__--operation key:__ `generate` | ||
|
||
This operation enables CRD and VAP/VAPB generation. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This operation enables CRD and VAP/VAPB generation. | |
This operation enables CRD and VAP/VAPB generation. | |
To avoid write contention, the Generate operation should be run as a singleton. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we are missing the operation here: https://github.com/open-policy-agent/gatekeeper/blob/master/manifest_staging/deploy/gatekeeper.yaml#L5084-L5086
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good catch! I fixed it. Do we want to cut 3.18.1 to update deploy/gatekeeper.yaml
?
Signed-off-by: Jaydip Gabani <gabanijaydip@gmail.com>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #3738 +/- ##
==========================================
- Coverage 54.49% 47.54% -6.95%
==========================================
Files 134 236 +102
Lines 12329 19923 +7594
==========================================
+ Hits 6719 9473 +2754
- Misses 5116 9556 +4440
- Partials 494 894 +400
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
…n-policy-agent#3738) Signed-off-by: Jaydip Gabani <gabanijaydip@gmail.com> (cherry picked from commit 5471e96)
What this PR does / why we need it:
Which issue(s) this PR fixes (optional, using
fixes #<issue number>(, fixes #<issue_number>, ...)
format, will close the issue(s) when the PR gets merged):Fixes #
Special notes for your reviewer: