Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use the dependency watcher cache in gatekeeper-constraint-status-sync #134

Merged

Conversation

mprahl
Copy link
Member

@mprahl mprahl commented Apr 18, 2024

The first commit updates the E2E environment Gatekeeper to 3.15 and uses the Stolostron fork.

This also improves the situation when the ConstraintTemplate is removed and the policy still deploys a Constraint.

Relates:
https://issues.redhat.com/browse/ACM-11200

This starts to use the Stolostron fork and also sets the audit interval
to 10 seconds to speed up the tests in case17.

Signed-off-by: mprahl <mprahl@users.noreply.github.com>
This also improves the situation when the ConstraintTemplate is removed
and the policy still deploys a Constraint.

Relates:
https://issues.redhat.com/browse/ACM-11200

Signed-off-by: mprahl <mprahl@users.noreply.github.com>
Copy link
Member

@JustinKuli JustinKuli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link

openshift-ci bot commented Apr 19, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JustinKuli, mprahl

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot openshift-merge-bot bot merged commit 64304d4 into open-cluster-management-io:main Apr 19, 2024
9 checks passed
@@ -230,7 +230,8 @@ install-resources:
-kubectl apply -k deploy/hubpermissions --kubeconfig=$(HUB_CONFIG)_e2e
@if [ "$(KIND_VERSION)" != "minimum" ]; then \
echo installing Gatekeeper on the managed cluster; \
kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.11.0/deploy/gatekeeper.yaml --kubeconfig=$(MANAGED_CONFIG)_e2e; \
curl -L https://raw.githubusercontent.com/stolostron/gatekeeper/release-3.15/deploy/gatekeeper.yaml | sed 's/- --disable-cert-rotation/- --disable-cert-rotation\n - --audit-interval=10/g' | kubectl apply --kubeconfig=$(MANAGED_CONFIG)_e2e -f -; \
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe it is better that release-3.15 being a parameter. but already merged sorr y for late

Copy link
Contributor

@yiraeChristineKim yiraeChristineKim Apr 19, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we can use this(from dale)

GATEKEEPER_TAG=$(shell curl -L https://api.github.com/repos/stolostron/gatekeeper/tags | jq -r '.[].name' | sort --version-sort | grep $(echo $(GATEKEEPER_VERSION) | cut -d '.' -f 1-2) | tail -1)

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@yiraeChristineKim won't we hit API rate limiting that way though?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants