jdef
jdef
Sorry I cannot share my yaml or copy paste the exact error messages. These nodes are airgapped, and copy/paste isn't possible. Here's a "by hand" re-typed version of the error...
I'm actually trying to replace our existing preprocessing w/ the `--filter-labels` flag :) So something like ytt isn't really a step forward at this point. Happy to hear about #319...
Negative effects: I ended up here when digging into noisy audit logs. I've since tuned these discovery audit events out for the gatekeeper service account user. However, as we continue...
I'm using this flag but discovery still pings all api-group/version combos. On Tue, Mar 16, 2021, 4:11 PM Sertaç Özercan ***@***.***> wrote: > We have a flag called --audit-match-kind-only that...
Probably? Though in an ideal world I'd be able to, at least, exclude GV's from discovery since most of them I don't need gatekeeper policies for. There's no need to...
OK, well, if we can't move `location` into `applyTo` for reasons, then what is the benefit of `applyTo` at all? Objects can already be selected by `spec.match`. moving `location` into...
@maxsmythe thanks for the detailed explanation. > The one problem with this is that it becomes less clear how pathTests would work... Can you elaborate on this feedback? I think...
deploy/gatekeeper.yaml doesn't have the mutation overlay. i understand there's a few hoops to jump through for experimental things, and i've jumped through them... and at the same time I want...
i'm still digging into this, but it looks like `go mod` deps are going to be more limited in the future. if `go mod vendor` is being to used to...