-
Story
-
Resolution: Done
-
Undefined
-
ACM 2.13.0
-
3
-
False
-
None
-
False
-
ACM-2501 - UI support for ValidatingAdmissionPolicies
-
-
-
GRC Sprint 2024-20, GRC Sprint 2024-21
-
None
There are some complexities beyond just standard search queries for the VAP integration mentioned in ACM-2501. In particular, these two sections need scoping/design in likely the search-collector:
- As a VAP user, I can select a given ValidatingAdmissionPolicy instance deployed on a cluster, and drill in to see more details
- View VAP YAML
- View VAPB YAML
- View resource YAML for the referenced resource used (VAP - spec.paramKind, VAPB - spec.paramRef)
- As a Gatekeeper user, I can understand the relationship between a Gatekeeper constraint that delegates to a ValidatingAdmisssionPolicy and the VAP instance itself
Discussion result:
- the search collector VAP and VAPB include an ownerReference or add a field to indicate their origin from Gatekeeper.
- show only independent VAPB on discovered policy (Not VAP)
- TBD: Where to add VAP, VAPB from Gatekeeper? rows in the details column where the VAP and VAPB names are links to a search query showing the YAML, or show them as tabs in the YAML tab
- ignore Severity, Cluster violation columns
- is related to
-
ACM-2501 UI support for ValidatingAdmissionPolicies
- Testing