Max Smythe
Max Smythe
> Someone could claim that this desire threatens oscillation, or at least nondeterminism, since we could have a similar policy that swaps these fields back again. We would not do...
Yep, can be closed.
@acpana IIRC you had a PR relating to this at some point?
Thanks for the info! It sounds like this is not something an admission webhook could check for. Something like `gator test` (which evaluates the raw config) would be able to...
this is similar to #206
> It seems like this issue should be on the main Gatekeeper project, no? I think this is about the ability to re-use Rego in the writing process, not necessarily...
> It's the main feature missing in Gatekeeper that we use heavily in Styra (in our case, we have ~1000 lines of Rego code which includes all the library code...
> Think all objects that include Pod somewhere in their data -- Job, Deployment, StatefulSet, CronJob. We use some products that have similar characteristics where we need multiple rules to...
@aligabres Sorry, I lost this thread, but yes. The ability for people to self-exempt is why it'd be good to have a second policy to limit where/when the label can...