-
Task
-
Resolution: Done
-
Critical
-
None
-
None
-
Quality / Stability / Reliability
-
2
-
False
-
-
False
-
-
-
GRC Sprint 2024-21, GRC Sprint 2024-23, GRC Sprint 2025-13
-
None
See ACM-14827 for more context.
We should also design to refactor the status-sync to use the policy statuses directly rather than Kubernetes events.
mprahl's top of mind options:
Store the last 10 compliance events to the status of each ConfigurationPolicy/CertificatePolicy/OperatorPolicy like we do for Policy.
-
- Benefits:
- Works with Discovered policies
- Allows the policy framework to move away from using Kubernetes events for status communication which occasionally leads to the Policy status being out of sync with the ConfigurationPolicy
- Similar experience to Policy
- Benefits:
-
- Downsides:
- It requires that we have control over the CRD so it’d be specific to OCM-io policies.
- Downsides: