Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-29248

[roxctl] Adjust config for roxctl sensor generate to reflect revised enforcement options

    • Future Sustainability
    • M
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Selected
    • In Progress
    • ROX-27883 - Address ACS policy enforcement
    • 0% To Do, 0% In Progress, 100% Done
    • Rox Sprint 4.9D - Global, Rox Sprint 4.9E - Global, Rox Sprint 4.9F - Global

      Remove these 7 settings in the UI ​​ Admission Control Settings

      • Listen on events
      • Listen on creates
      • Listen on updates
      • Enforce on creates
      • Enforce on updates
      • Timeout (seconds)
      • Contact Image Scanners

      Replace the above with two options (to be worded by UX/Doc Team) but their jist will be:

      • Hey customer, do you want the admission controller to enforce? By default, yes. A customer might switch it to No
      •  [possibly in this change, but possibly deferred so there is only "fail-open"] do you want the admission controller to fail open or fail closed? By default, it will fail open for backward compatibility. 

          There are no Sub-Tasks for this issue.

              ksanchet@redhat.com Khushboo Sancheti
              vwilson@redhat.com Van Wilson
              ACS Core Workflows
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: