Skip to content
This repository has been archived by the owner on Sep 26, 2023. It is now read-only.

Add new Gatekeeper operator API options #179

Open
1 of 17 tasks
font opened this issue Jul 16, 2021 · 0 comments
Open
1 of 17 tasks

Add new Gatekeeper operator API options #179

font opened this issue Jul 16, 2021 · 0 comments

Comments

@font
Copy link
Member

font commented Jul 16, 2021

These options should use the same defaults provided by Gatekeeper (see its Helm chart), which is typically the safe value of false, or null, etc. These encompass all the Gatekeeper Helm Chart options provided in v3.5.1. We should consider whether to add all of them or on an as-needed basis.

GatekeeperSpec:

  • validatingWebhookTimeoutSeconds
  • enableDeleteOperations
  • PodLabels

ImageConfig:

  • pullSecrets

Gatekeeper Controller Manager (WebhookConfig):

Gatekeeper Audit (AuditConfig):

  • --audit-match-kind-only
  • hostNetwork
  • priorityClassName

PodDisruptionBudget (consider adding this object to the Gatekeeper Controller config WebhookConfig):

  • minAvailable

ResourceQuota (consider embedding this object into each controller config e.g. WebhookConfig):

  • podCountLimit

  • SecretAnnotations

Service:

  • type
  • loadBalancerIP
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant