-
Bug
-
Resolution: Done
-
Normal
-
None
-
None
-
2
-
False
-
None
-
False
-
eng-lead
-
We do not continuously reconcile.
-
-
-
GRC Sprint 2023-10, GRC Sprint 2023-11
-
Low
-
No
Description of problem:
When a Policy contains an empty
object-templates-raw: |
Checking the Policy history, 5x a minute, there is a reconcile. The message is:
notification - policy-namespace contains no object templates to check, and thus has no violations
Version-Release number of selected component (if applicable):
2.8 latest: ACM:2.8.0-SNAPSHOT-2023-06-01-18-13-26
How reproducible:
Always
Steps to Reproduce:
- Create a policy that results in an empty
object-templates-raw
spec:
evaluationInterval:
compliant: 2h
noncompliant: 45s
object-templates-raw: |
{{- if eq (lookup "operator.openshift.io/v1" "IngressController" "openshift-ingress-operator" "default").metadata.name "default" }}
- complianceType: musthave
Actual results:
Continuous entries
Expected results:
Single entry until the policy evaluates to include an object-template resource