Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-4873

openshift-marketplace namespace missing "audit-version" and "warn-version" PSA label

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Normal
    • None
    • 4.13.0, 4.12.0
    • OLM
    • Low
    • Ultron 229, Voltron 230
    • 2
    • False
    • Hide

      None

      Show
      None
    • This adds "audit-version" and "warn-version" labels to match the "enforce-version" label to properly specify pod security admission (PSA).
    • Bug Fix

    Description

      Description of problem:

      The openshift-marketplace namespace was recently updated to add the "audit" and "warn" PSA labels with the value of "restricted", but the "audit-version" and "warn-version" labels were not specified.

      Version-Release number of selected component (if applicable):

      4.12.0

      How reproducible:

      Always

      Steps to Reproduce:

      1. Launch any openshift cluster
      2. Note missing labels on the openshift-marketplace namespace
      3.
      

      Actual results:

      Labels do not exist

      Expected results:

      Labels "warn-version" and "audit-version" set to the current k8s version.

      Additional info:

      Because these labels are set to the k8s PSA version, when that version is updated, the version labels here (including "enforce-version" label) will need to be updated to match.

      Attachments

        Issue Links

          Activity

            People

              tshort@redhat.com Todd Short
              tshort@redhat.com Todd Short
              Jian Zhang Jian Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: