Uploaded image for project: 'Cloud Infrastructure Security & Compliance'
  1. Cloud Infrastructure Security & Compliance
  2. CMP-1100

[RFE] Allow labels to be set for ScanSetting to allow ResultServer to run on select nodes

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Critical Critical
    • 2021Q4 Plan
    • None
    • None
    • None
    • 3
    • False
    • False
    • Engineering
    • CMP Sprint 37

      1. Proposed title of this feature request
      Allow annotations to be added for ScanSetting to allow ResultServer to run on select nodes

      2. What is the nature and description of the request?
      In a Cluster with 3rd party storage solution which does not run storage driver on Master nodes, the ResultServer goes in Pending state and is not scheduled to a node. This prevents the Scans pods from completing and go into NotReady state indefinitely. This request is to allow annotations for the ScanSetting to allow the ResultServer to be scheduled to another trusted node (in our case Infra nodes), so that the scans can complete without manual intervention.

      3. Why does the customer need this? (List the business requirements here)
      The Compliance Operator is being used to report the Platform Security Compliance to our Enterprise Compliance team. Without these reports, OpenShift may not be permitted to run in our Enterprise.

      4. List any affected packages or components.
      Compliance Operator

            josorior@redhat.com Juan Antonio Osorio (Inactive)
            dcaspin@redhat.com Doron Caspin
            Prashant Dhamdhere Prashant Dhamdhere (Inactive)
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: