Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-14837

Implement discovered polices support for VAP

XMLWordPrintable

    • GRC Sprint 2024-20, GRC Sprint 2024-21
    • None

      There are some complexities beyond just standard search queries for the VAP integration mentioned in ACM-2501. In particular, these two sections need scoping/design in likely the search-collector:

      • As a VAP user, I can select a given ValidatingAdmissionPolicy instance deployed on a cluster, and drill in to see more details
        • View VAP YAML
        • View VAPB YAML
        • View resource YAML for the referenced resource used (VAP - spec.paramKind, VAPB - spec.paramRef)
      • As a Gatekeeper user, I can understand the relationship between a Gatekeeper constraint that delegates to a ValidatingAdmisssionPolicy and the VAP instance itself

      Discussion result: 

      • the search collector VAP and VAPB include an ownerReference or add a field to indicate their origin from Gatekeeper.
      • show only independent VAPB on discovered policy (Not VAP)
      • TBD:  Where to add VAP, VAPB from Gatekeeper? rows in the details column where the VAP and VAPB names are links to a search query showing the YAML, or show them as tabs in the YAML tab
      • ignore Severity, Cluster violation columns

              yikim@redhat.com Yi Rae Kim
              mprahl Matthew Prahl
              Derek Ho Derek Ho
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: