Loading...

XML

Word

Printable

Type: Task
Resolution: Unresolved
Priority: Undefined
Fix Version/s: None
Affects Version/s: None
Labels:
None

Story Points:
8
Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Pod Security Admission Integration - Restricted Enforcement
Feature Link:
OCPSTRAT-487 - Pod Security Admission Integration - Restricted Enforcement
Intelligence Requested:
Market:

Sprint:
Auth - Sprint 249, Auth - Sprint 250

Target Version:

openshift-4.16

SFDC Cases Links:
SFDC Cases Counter:

Workloads running in platform namespaces (openshift-, kube-, default) must have the required-scc annotation defined in order to pin a specific SCC (see AUTH-482) for more details. This task adds a monitor test that analyzes all such workloads and tests the existence of the "openshift.io/required-scc" annotation.