Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Support generating VAPs from policies that define exclude block #10196

Open
2 tasks done
MariamFahmy98 opened this issue May 7, 2024 · 0 comments · May be fixed by #10215
Open
2 tasks done

[Feature] Support generating VAPs from policies that define exclude block #10196

MariamFahmy98 opened this issue May 7, 2024 · 0 comments · May be fixed by #10215
Assignees
Labels
enhancement New feature or request VAP Issues related to ValidatingAdmissionPolicy support.

Comments

@MariamFahmy98
Copy link
Collaborator

Problem Statement

Currently, ValidatingAdmissionPolicies are generated from Kyverno policies that define only the match block. Even though there would be some limitations when it comes to generating VAPs given policies that define exclude block due to different schemas, it would be better to support generating them for the simple use cases.

Solution Description

The exclude block in Kyverno policies corresponds to the excludeResourceRules in VAPs.

Alternatives

No response

Additional Context

No response

Slack discussion

No response

Research

  • I have read and followed the documentation AND the troubleshooting guide.
  • I have searched other issues in this repository and mine is not recorded.
@MariamFahmy98 MariamFahmy98 added enhancement New feature or request VAP Issues related to ValidatingAdmissionPolicy support. labels May 7, 2024
@MariamFahmy98 MariamFahmy98 added this to the Kyverno Release 1.13.0 milestone May 7, 2024
@MariamFahmy98 MariamFahmy98 self-assigned this May 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request VAP Issues related to ValidatingAdmissionPolicy support.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant