gatekeeper

gatekeeper copied to clipboard

release notes should talk about new components

1

for example 3.6 adds `gatekeeper-update-crds-hook` without any explanation on who needs it / what it does / how to monitor it

grosser

Use netflify for previews for docs changes

4

We should use a GitHub action that lets us be sure the docs build (and maybe also preview them to check that they aren't wonky). A lot of projects use...

willbeason

Provide a way to define multiple value for the same location in AssignMetadata

4

**Describe the solution you'd like** I would like to be able to define multiple values for the same location when using AssignMetadata, like this: ``` apiVersion: mutations.gatekeeper.sh/v1alpha1 kind: AssignMetadata metadata:...

strus38

Add common helm values to gatekeeper-update-namespace-label job

1

In the gatekeeper helm chart, this job if enabled does not use many of the common values or expose its own that might affect scheduling that the rest of the...

sidewinder12s

Documentation on Replica Setting

5

**Describe the solution you'd like** A clear documentation on replica setting (e.g. will 1 replica work? will 3 replica work? any implication on replica setting?) **Anything else you would like...

ethernoy

Allow syncing all possible resource versions

9

**Describe the solution you'd like** The [replicating data](https://open-policy-agent.github.io/gatekeeper/website/docs/sync) feature requires explicitly specifying resource versions. I'd like to be able to sync *all* versions of a resource, without having to specify...

FooBarWidget

allow selecting constraints by label

5

I want to have: - some constraints that are only audited and not enforced (trialing them or only using them to gather data) - some constraints that are only enforced...

grosser

Allow custom labels for gatekeeper_violations

7

We want to audit a large list of resources (5k+). Putting the violations onto the rules will not scale since we'd hit etcd object limit. So we need gatekeeper_violations to...

grosser

OOMKilled - OPA Gatekeeper Audit - --audit-from-cache enabled

8

**What steps did you take and what happened:** Deployed OPA Gatekeeper along with --audit-from-cache=true set. The Gatekeeper Audit pod seems to start and get all the relevant metadata from the...

aido123

Reconciler error in Gatekeeper controller pod

6

**What steps did you take and what happened:** [A clear and concise description of what the bug is.] Deployed gatekeeper and created a constraint template. In Gatekeeper controller pod logs,...

akchamps