-
Task
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
2
-
False
-
None
-
False
-
-
-
GRC Sprint 2023-02, GRC Sprint 2023-03, GRC Sprint 2023-04, GRC Sprint 2023-05
-
No
In ACM-3327, support was added for cluster-scoped policies. In this case, it was limited to Gatekeeper ConstraintTemplates and constraints.
To handle the removal of these, owner references cannot be used due to it being cluster-scoped, so a finalizer was added of "policy.open-cluster-management.io/cleanup-cluster-scoped-policies" to Policy objects that include such cluster-scoped policies.
When the governance-policy-framework addon is uninstalled, these finalizers need to be removed in order for the Policy objects to be removed. To accomplish this, perform a similar cleanup as was done for the config-policy-controller by using an addon framework predelete hook in the governance-policy-addon-controller.
- is triggered by
-
ACM-3322 Native Gatekeeper constraint support in policies
- Closed