Max Smythe
Max Smythe
Rego fixed ... pod-level security context retrieval did not take into account that it was a child of `spec`
@JaydipGabani SGTM. Is there anything special we need to do for that? Or just update the annotation?
bumped minor version
I'm guessing the k8s tests are failing because securityContext.appArmorProfile only exists as of k8s 1.30?
Unfortunately not possible today, but such behavior is compatible with convergence requirement if the values interpolated are immutable (namespace, name)
Definitely worth mentioning the '*' in the README as a potential optimization. We wouldn't want to have anything other than '*' in the default VWH config, as requiring users to...
Yeah, I think we've discovered a best practice for templates where we perform a test to make sure we are executing against an appropriate group/kind before triggering a violation.
@tspearconquest Is your concern outgoing request volume from the API server, or G8r scalability? If the latter, have the newer releases made this less relevant?
ack, thanks for the context
I don't know if there are any hard numbers on this that I can give you, but: * A larger response will take more RAM * A larger response will...