Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set the severity annotation for non-OCM policies #132

Merged

Conversation

mprahl
Copy link
Member

@mprahl mprahl commented Nov 16, 2023

For policy-templates entries that are not OCM policies, it is supported to set the policy.open-cluster-management.io/severity annotation for other tooling to determine the severity of a noncompliant event. This adds that automatically.

Relates:
https://issues.redhat.com/browse/ACM-6860

Copy link
Member

@dhaiducek dhaiducek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gatekeeper is our current use-case, but I think this should be more generic, removing the fact that it's Gatekeeper and just setting the annotation if it's not OCM? It'd make the logic simpler and also prevent reverting this change if we ever add integrations for other policy engines. What do you think?

@mprahl mprahl changed the title Set the severity annotation for supported Gatekeeper objects Set the severity annotation for non-OCM policies Nov 16, 2023
@mprahl mprahl requested a review from dhaiducek November 16, 2023 16:27
For policy-templates entries that are not OCM policies, it is supported
to set the `policy.open-cluster-management.io/severity` annotation for
other tooling to determine the severity of a noncompliant event. This
adds that automatically.

Relates:
https://issues.redhat.com/browse/ACM-6860

Signed-off-by: mprahl <[email protected]>
Copy link
Member

@dhaiducek dhaiducek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thanks! 🙂

@openshift-ci openshift-ci bot added the lgtm label Nov 16, 2023
Copy link

openshift-ci bot commented Nov 16, 2023

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dhaiducek, mprahl

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot openshift-merge-bot bot merged commit fd7a535 into open-cluster-management-io:main Nov 16, 2023
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants