Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-23809

Separate configuration for gatekeeper validating and admission webhooks

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • Gatekeeper 3.20.0
    • GRC
    • Product / Portfolio Work
    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • Hide

      Provide the required acceptance criteria using this template.

      • ...
      Show
      Provide the required acceptance criteria using this template. ...
    • GRC Sprint 2025-18, GRC Sprint 2025-19
    • None

      Value Statement

      Using the gatekeeper mutation webhook is becoming more common, and users need to configure it separately from the validating webhook.

      In particular, there have been requests to configure the namespaceSelector (https://issues.redhat.com/browse/RFE-7565 ) and failurePolicy (https://issues.redhat.com/browse/RFE-7566 ). Currently those fields are configurable in the Gatekeeper CR, but apply to both webhooks identically. There will be additional fields that should also be configurable, but those are in separate stories. 

      Definition of Done for Engineering Story Owner (Checklist)

      •  

      Development Complete

      • The code is complete.
      • Functionality is working.
      • Any required downstream Docker file changes are made.

      Tests Automated

      • [ ] Unit/function tests have been automated and incorporated into the
        build.
      • [ ] 100% automated unit/function test coverage for new or changed APIs.

      Secure Design

      • [ ] Security has been assessed and incorporated into your threat model.

      Multidisciplinary Teams Readiness

      • [ ] Create an informative documentation issue using the Customer

      Portal Doc template that you can access from [The Playbook](

      https://docs.google.com/document/d/1YTqpZRH54Bnn4WJ2nZmjaCoiRtqmrc2w6DdQxe_yLZ8/edit#heading=h.9fvyr2rdriby),

      and ensure doc acceptance criteria is met.

      • Call out this sentence as it's own action:
      • [ ] Link the development issue to the doc issue.

      Support Readiness

      • [ ] The must-gather script has been updated.

              jkulikau@redhat.com Justin Kulikauskas
              jkulikau@redhat.com Justin Kulikauskas
              Derek Ho Derek Ho
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: