[AUTH-442] Cluster Fleet Evaluation: Create Controller - Red Hat Issue Tracker

Type: Story
Resolution: Done
Priority: Undefined
Fix Version/s: None
Affects Version/s: None
Labels:
- no-qe-needed

Work Type:
BU Product Work
Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
CNTRLPLANE-73
Intelligence Requested:
Market:

Sprint:
Auth - Sprint 243, Auth - Sprint 245

SFDC Cases Links:
SFDC Cases Open:
SFDC Cases Counter:

What

Create a controller in cluster-kube-apiserver-operator that checks for pod security violations and sets the ClusterStatusConditionTypes.

Why

This will create monitoring alerts with clusters that would fail on enforced PSa.

This will help us to make a decision for enforcement on v4.15.

account is impacted by

OCPBUGS-25384 [4.14] Cluster Fleet Evaluation Backport to evluate PS violations

Closed

is cloned by

AUTH-471 [4.14] Cluster Fleet Evaluation: Create Controller

Closed

links to

openshift/cluster-kube-apiserver-operator#1588: AUTH-442: psa cluster fleet evaluation

openshift/enhancements#1216: OCPSE-25: [dev-guide] Cluster Fleet Evaluation

openshift/library-go#1634: AUTH-442: add ClusterFleetEvaluation type to status controller

Assignee:: Krzysztof Ostrowski

Reporter:: Krzysztof Ostrowski

QA Contact:: Deepak Punia (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2023/11/07 8:29 PM

Updated:: 2024/11/12 9:14 PM

Resolved:: 2023/12/21 2:53 PM