-
Feature Request
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
False
-
None
-
False
-
Not Selected
-
-
-
Business Problem:
While defining RHACS policies it is not possible to differentiate between deployment types, i.e. CronJob, Deployment, StatefulSet, etc. Thus, it is not possible to apply a specific policy to only one type of deployment resource. Using labels to exclude deployment types (like CronJobs for example) is not a solution for us, since clients could use the label to workaround the policy for deployments too.
Use Cases:
- Let's look at a policy which shall enforce the presence of more than one replica for example. While this criteria makes sense for regular deployments (as you can guarantee high availability with 2 or more replicas) it is not compatible with CronJobs for example.
- In this scenario it would be helpful if we could differentiate between the two.
Key Functionality:
Provide a way to indicate the deployment type in the policy criteria or scope inclusion/exclusion.
Benefits:
It would be possible to implement certain policies which would help us make deployments more resilient against node failures.
Acceptance criteria:
- Correctly differentiate between deployment types in policies.
- Possibility to define to which deployment type a specific policy applies to.