Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-15900

Gatekeeper autoFromCache=Automatic error when namespaceSeletor is used in match

XMLWordPrintable

    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • 2
    • GRC Sprint 2025-04
    • Moderate
    • None

      Description:
      When we set
      auditFromCache=Automatic and constraint has only
      namespace selector not "namespace" array in match
       
      it collects resources under all namespaces
       
       
      Solution:
      When namespaceSelector is presented in constraint. Add "namespace" sync in Config
       
      Reproduce: 
      spec.audit.autoFromCache=Automatic  in Gatekeeper CR add constraint.yaml

       

        1. constraintTemplate.yaml
          0.5 kB
          Yi Rae Kim
        2. constraint.yaml
          0.4 kB
          Yi Rae Kim

              yikim@redhat.com Yi Rae Kim
              yikim@redhat.com Yi Rae Kim
              Derek Ho Derek Ho
              ACM GRC & Gatekeeper
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: