Uh oh!
There was an error while loading. Please reload this page.
✨ Add ValidatingAdmissionPolicy to enforce package uniqueness across ClusterExtension - #774
Conversation
✅ Deploy Preview for olmv1 ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
Uh oh!
There was an error while loading. Please reload this page.
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@## main #774 +/- ##
=======================================
Coverage 67.16% 67.16% =======================================
Files 22 22 Lines 1465 1465 =======================================
Hits 984 984 Misses 415 415 Partials 66 66
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
f17ff5e to
55eab3eComparem1kola
commented
Apr 22, 2024
Keeping this in draft for now. It seems like tilt job needs to be updated in addition to #771 |
5d45189 to
6537533CompareUh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
0951051 to
4cadf14CompareTo enforce package uniqueness across `ClusterExtension` Signed-off-by: Mikalai Radchuk <mradchuk@redhat.com>
This is a workaround for kustomize issue where it does not prefix `ValidatingAdmissionPolicy`'s name in `ValidatingAdmissionPolicyBinding`'s field `spec.policyName`. This results in manifests which can still be applied to a cluster, but the policy will not be working due to broken policy binding. These APIs are now stable in 1.30 so one might expect that Kustomize will eventually support these by default. If this happens - we will be able to remove this change. Signed-off-by: Mikalai Radchuk <mradchuk@redhat.com>
4cadf14 to
e59ab41Compare
joelanford
left a comment
There was a problem hiding this comment.
Looks great!
In a follow-up, could we add some tests?
Description
To enforce package uniqueness across
ClusterExtension.We currently have this enforcement on the operator-controller level, but with Deppy removal in #758 we want to shift it into API server.
Reviewer Checklist