Check admission-control status in the secured cluster policies

Adds CentralDB to the central status policy. Make CORE_BPF the default collection method. Signed-off-by: Jorge Tudela <[email protected]> (cherry picked from commit b168624)
stolostron · Jun 12, 2024 · b77de12 · b77de12
1 parent 68c2d5a
commit b77de12
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 2 deletions.
diff --git a/...erator/policy-sets/stable/openshift-plus/input-acs-central/policy-acs-central-status.yaml b/...erator/policy-sets/stable/openshift-plus/input-acs-central/policy-acs-central-status.yaml
@@ -1,3 +1,4 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -10,6 +11,16 @@ status:
 ---
 apiVersion: apps/v1
 kind: Deployment
+metadata:
+  name: central-db
+  namespace: stackrox
+status:
+  conditions:
+    - status: "True"
+      type: Available
+---
+apiVersion: apps/v1
+kind: Deployment
 metadata:
   name: scanner-db
   namespace: stackrox

diff --git a/...cygenerator/policy-sets/stable/openshift-plus/input-sensor/policy-acs-sync-resources.yaml b/...cygenerator/policy-sets/stable/openshift-plus/input-sensor/policy-acs-sync-resources.yaml
@@ -18,7 +18,7 @@ spec:
     scannerComponent: Disabled
   perNode:
     collector:
-      collection: EBPF
+      collection: CORE_BPF
       imageFlavor: Regular
     taintToleration: TolerateTaints
 ---

diff --git a/...icy-sets/stable/openshift-plus/input-sensor/policy-advanced-managed-cluster-security.yaml b/...icy-sets/stable/openshift-plus/input-sensor/policy-advanced-managed-cluster-security.yaml
@@ -79,6 +79,6 @@ spec:
     listenOnUpdates: false
   perNode:
     collector:
-      collection: EBPF
+      collection: CORE_BPF
       imageFlavor: Regular
     taintToleration: TolerateTaints
diff --git a/...olicy-sets/stable/openshift-plus/input-sensor/policy-advanced-managed-cluster-status.yaml b/...olicy-sets/stable/openshift-plus/input-sensor/policy-advanced-managed-cluster-status.yaml
@@ -1,3 +1,4 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -15,3 +16,13 @@ metadata:
   namespace: stackrox
 status:
   numberMisscheduled: 0
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: admission-control
+  namespace: stackrox
+status:
+  conditions:
+    - status: "True"
+      type: Available