Loading...

XML

Word

Printable

Type: Story
Resolution: Duplicate
Priority: Undefined
Fix Version/s: openshift-4.14.z
Affects Version/s: None
Labels:
- no-qe-needed

Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
CNTRLPLANE-73
Feature Link:
OCPSTRAT-487 - Pod Security Admission Integration - Restricted Enforcement
Intelligence Requested:
Market:

Target Version:

openshift-4.14.z

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

What

Create a controller in cluster-kube-apiserver-operator that checks for pod security violations and sets the ClusterStatusConditionTypes.

Why

This will create monitoring alerts with clusters that would fail on enforced PSa.

This will help us to make a decision for enforcement on v4.15.

clones

AUTH-442 Cluster Fleet Evaluation: Create Controller

Closed

links to

openshift/cluster-kube-apiserver-operator#1600: [4.14] AUTH-471: psa cluster fleet evaluation

openshift/library-go#1644: AUTH-471: pkg/operator/status - add EvaluationConditionDetected

Assignee:: Krzysztof Ostrowski

Reporter:: Krzysztof Ostrowski

QA Contact:: Deepak Punia (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2023/12/12 5:38 PM

Updated:: 2023/12/14 3:15 PM

Resolved:: 2023/12/14 10:42 AM