Jim Bugwadia
Jim Bugwadia
Also see: https://github.com/kyverno/kyverno/issues/2194.
Agreed. The primary use case I had in mind is for a policy author / developer who wants to create and test a policy rule with JMESPath, etc. Here its...
Right! Can we simply allow passing in the predicates then? As this is what they would provide the `cosign` CLI as well, right?
Yes, this makes sense. We can add `predicateType` to allow the match. Also, should we rename `predicate` to `path` or `filePath` so its clear we are expecting a path?
Sounds good. Since we are using camel case, lets go with `predicateFile`. Is there anything else pending to close this?
Thanks @tend2infinity!
Hi @james-callahan - this is an interesting idea. Do you have an example of how you would want to use this i.e. which controls you would want to include /...
The value I see in the `include` option would be to **not** have to specify control details in a custom rule, and delegate to the Kubernetes pod security implementation based...
> As part of patch mutation there is marshalling and un-marshalling happen in which golang replace the double backslash (//) with single backslash (/). @vyankyGH - marshalling / unmarshalling should...
Hi @go-faustino - just to confirm, does the policy work correctly in the admission controls webhook? The CLI reuses some of the same code as the API server (and Kustomize)...