enhancements icon indicating copy to clipboard operation
enhancements copied to clipboard

KEP-3488: CEL admission: Add graceful rollout, warning and audit support

Open jpbetz opened this issue 2 years ago • 2 comments

  • One-line PR description: Update the CEL admission KEP to support graceful policy rollout by adding ability to report validation failures only as warnings or audit annotations and for enhancing metrics to container the information needed to monitor a rollout.
  • Issue link: #3492

jpbetz avatar Jan 12 '23 14:01 jpbetz

cc @maxsmythe @cici37 @liggitt @tallclair @andrewsykim

jpbetz avatar Jan 12 '23 16:01 jpbetz

cc @liggitt

jpbetz avatar Jan 24 '23 18:01 jpbetz

/assign @deads2k @lavalamp Here is another small KEP update to ValidatingAdmissionPolicy is ready for an approver pass.

jpbetz avatar Jan 24 '23 18:01 jpbetz

LGTM but two comments for you to look at first

lavalamp avatar Jan 31 '23 00:01 lavalamp

Feedback applied. I've left some of the comment threads open where further discussion might be needed.

jpbetz avatar Jan 31 '23 23:01 jpbetz

thanks for the update, I did a quick sweep and my open questions were resolved

liggitt avatar Feb 04 '23 05:02 liggitt

@deads2k @lavalamp All open issues on this one are resolved. It's ready for another approver pass.

jpbetz avatar Feb 06 '23 17:02 jpbetz

Thanks @tallclair, I've incorporated the feedback into the KEP. I've left some of the comments open until you've gotten a chance to respond.

jpbetz avatar Feb 07 '23 20:02 jpbetz

@lavalamp this is ready for another approver pass.

jpbetz avatar Feb 08 '23 15:02 jpbetz

Thanks @lavalamp, feedback applied.

jpbetz avatar Feb 09 '23 14:02 jpbetz

/lgtm /approve

lavalamp avatar Feb 09 '23 17:02 lavalamp

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jpbetz, lavalamp

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot avatar Feb 09 '23 17:02 k8s-ci-robot