gatekeeper

gatekeeper copied to clipboard

validation latencies capped at 3 secs even though validatingWebhookTimeoutSeconds set at 5

1

**What steps did you take and what happened:** [A clear and concise description of what the bug is.] We are running load test on a policy making an external_data call...

pankajmt

Support `--log-stats-audit` / `--log-stats-admission` in Helm chart

1

**Describe the solution you'd like** Not sure if I got it wrong, but by searching around the repo & looking at the Helm charts I see no way of setting...

safts

fix: only set matchConditions on webhook when not empty

2

**What this PR does / why we need it**: only set matchConditions on webhooks when the list in values is not empty empty matchConditions gets ommited by kubernetes and when...

martijnvdp

fix(helm): avoid GitOps diff on matchConditions

4

**What this PR does / why we need it**: https://github.com/open-policy-agent/gatekeeper/pull/3343 introduced `matchConditions` support in webhooks, which is great. However for Kubernetes < 1.30, this feature is behind a feature gate,...

sathieu

Change chart to only set matchConditions on webhooks when the value parameter is not empty

1

**Describe the solution you'd like** would be nice if the following statements only set this matchConditions if the value .Values.validatingWebhookMatchConditions is not [] empty ``` kind: ValidatingWebhookConfiguration {{- if ge...

martijnvdp

chore: Make service account configurable and add option to opt out of creation

1

**What this PR does / why we need it**: Adds an option to opt out of serviceAccount creation, much like the .Values.rbac.create already does. Additionally, allows for serviceAccountNames to be...

stgrace

Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.4.1 to 1.4.2. Release notes Sourced from github.com/go-logr/logr's releases. v1.4.2 What's Changed Fix lint: named but unused params by @​thockin in go-logr/logr#268 Add a Go report card,...

dependabot[bot]

**What steps did you take and what happened:** I scaled my deployment from 1 replica to 3, and it takes up to 20 seconds before the first pod is created,...

fogunsanmi-gd

**What this PR does / why we need it**: **Which issue(s) this PR fixes** *(optional, using `fixes #(, fixes #, ...)` format, will close the issue(s) when the PR gets...

tamalsaha

Interpolation in mutation hooks for namespace or other parameters

1

**Describe the solution you'd like** Interpolation in mutation hooks. Is this possible today? ``` apiVersion: mutations.gatekeeper.sh/v1 kind: Assign metadata: name: demo-dns-config spec: applyTo: - groups: [""] kinds: ["Pod"] versions: ["v1"]...

ajohnstone