Sertaç Özercan
Sertaç Özercan
We have a flag called `--audit-match-kind-only` that only looks at match.kinds set by constraints for reducing API calls too. However, if a constraint does not have match.kinds defined, it'll check...
This should be resolved with v3.7.0 since we moved to `gatekeeper-crds` image which supports armv7, arm64 and amd64.
Does it work if you render the Helm template before applying?
https://github.com/marketplace/actions/netlify-actions https://github.com/UffizziCloud/uffizzi_app https://github.com/rossjrw/pr-preview-action
Closing, looks like the question has been answered. If not, please feel free to re-open the issue.
You can set `fromMetadata` field, so it looks something like this: ``` apiVersion: mutations.gatekeeper.sh/v1beta1 kind: AssignMetadata metadata: name: demo-annotation-owner spec: match: scope: Namespaced location: "metadata.annotations.owner" parameters: assign: fromMetadata: field: namespace...
@bianchi2 are you using GK v3.7.0? pod metadata should mutate to: (for `default` ns) ``` metadata: annotations: owner: default ```
It won't take it from namespace's annotation. fromMetadata will mutate with that object's namespace or name. In your case, pod's metadata will have ``` metadata: annotations: owner: gatekeeper-annotations ```
It would be great if we can add an allowed example too.