Uploaded image for project: 'OpenShift Storage'
  1. OpenShift Storage
  2. STOR-829

OpenShift: New admission plugin

    XMLWordPrintable

Details

    • Story
    • Resolution: Done
    • Undefined
    • None
    • None
    • None
    • Storage Sprint 224, Storage Sprint 225, Storage Sprint 226, Storage Sprint 227, Storage Sprint 228

    Description

      Create a validating admission plugin that allows pods to be created if:

      • The pod references CSI volume(s)
      • The CSI Driver(s) for the referenced volume(s) are allowed based on the PodSecurity namespace labels.

      Enhancement: https://github.com/openshift/enhancements/blob/master/enhancements/storage/csi-inline-vol-security.md 

      Attachments

        Issue Links

          links to

          GitHub openshift/api#1316: STOR-829: Add CSIInlineVolumeAdmission feature gate

          GitHub openshift/cluster-kube-apiserver-operator#1385: STOR-829: Enable CSIInlineVolumeSecurity admission plugin

          GitHub openshift/csi-driver-shared-resource-operator#59: STOR-829: set security.openshift.io/csi-ephemeral-volume-profile label

          GitHub openshift/ibm-roks-toolkit#732: Add new OCP 4.13 storage admission plugin

          GitHub openshift/kubernetes#1384: STOR-829: Add CSIInlineVolumeSecurity admission plugin

          GitHub openshift/kubernetes#1432: OCPBUGS-6030: Rebase onto kube v1.26

          GitHub openshift/kubernetes#1444: [DO_NOT_MERGE] Test

          GitHub openshift/kubernetes#1445: [DO_NOT_MERGE] Rebase 1.26.0

          GitHub openshift/kubernetes#1447: [DO_NOT_MERGE] Rebase 1.26.0

          GitHub openshift/kubernetes#1499: OCPBUGS-8220: CSI Inline Volume admission plugin does not log object name correctly

          GitHub openshift/kubernetes#1515: [release-4.13] OCPBUGS-8220: CSI Inline Volume admission plugin does not log object name correctly

          GitHub openshift/kubernetes#1523: WIP: inject detach error

          GitHub openshift/kubernetes#1524: WIP: Rebase 1.27.1

          GitHub openshift/kubernetes#1528: WIP: tmp rebase k8s 1.27.0

          GitHub openshift/kubernetes#1532: WIP: test 4.14 images

          GitHub openshift/kubernetes#1539: WIP: Rebase CI test

          GitHub openshift/kubernetes#1546: [WIP] Debug panic

          GitHub openshift/microshift#1532: rebase-4.14.0-0.nightly-2023-03-17-122050_amd64-2023-03-17_arm64-2023-03-20

          GitHub openshift/microshift#1539: rebase-4.14.0-0.nightly-2023-03-20-201450_amd64-2023-03-20_arm64-2023-03-20

          GitHub openshift/openshift-docs#47603: OSDOCS-3788:CSI inline ephemeral vols TP-> GA

          Activity

            People

              jdobson@redhat.com Jonathan Dobson
              jdobson@redhat.com Jonathan Dobson
              Penghao Wang Penghao Wang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: