Making the namespace selector configurable allows for more flexibility.
e.g. we want to enable it for only 1 namespace.
Signed-off-by: Ali Rizwan <ari@hellofresh.com>
* stable/opa: add namespace selector to OPA webhook resource and bump version
Signed-off-by: Casey Lee <cplee@nektos.com>
* stable/opa: update namespace label to be 'opt-out' vs 'opt-in'
Signed-off-by: Casey Lee <cplee@nektos.com>
* Added option to provide a different port instead of 443
Signed-off-by: Joao Marcal <joao.marcal12@gmail.com>
* Fixed a bug introduced in the last commit and added some helpfull comments
to values.yaml
Signed-off-by: Joao Marcal <joao.marcal12@gmail.com>
* Removed trailing space
Signed-off-by: Joao Marcal <joao.marcal12@gmail.com>
* Separate the kube-mgmt replication arguments.
Fixes#11870
Signed-off-by: Ivo Verberk <iverberk@xebia.com>
* Bump the patch version to indicate the replication arguments bugfix.
Signed-off-by: Ivo Verberk <iverberk@xebia.com>
* Adds PodDisruptionBudget to OPA
- Defaults to off with a default min value of 1
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Fixed linting issue in values
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Fixed default values docs in README
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Adds resource limits for containers in deploy
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Updated README and bumped chart.
- README with new variables
- Bumped chart version
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Initial attempt at adding kube-mgmt to the chart
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Updated to add auth/imagePullPolicy/rbac
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Fix linting issues
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Update kube-mgmt image to 0.8.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Add the ability to turn off authz
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Add note about authz.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Add in fixes from tsandall
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Add a kubectl proxy to allow rego to make kubernetes subject access reviews.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Bumped the wrong version.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Fix lint.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Update based on feedback.
Update based on feedback by tsandall and timothyhinrichs.
Added OWNERS too for ease of management.
Signed-off-by: Kevin Fox <kevin@efox.cc>
* Add Open Policy Agent chart
Signed-off-by: Torin Sandall <torinsandall@gmail.com>
* Update chart with example to kick the tires
Signed-off-by: Torin Sandall <torinsandall@gmail.com>
* Update chart per review feedback
- Set app version to OPA vresion per convention
- Prefer user facing chart name to local in install guide
- Refactor standard labels into helper template
Signed-off-by: Torin Sandall <torinsandall@gmail.com>
* Add configuration table to README
Signed-off-by: Torin Sandall <torinsandall@gmail.com>
Carlo Columna
Xin Jin
Ali Rizwan
Adam Graves
Adam Cheney
Casey Lee
João Marçal
kfox1111
Ivo Verberk
Thomas Miller
Thomas Miller
matthope
Jeff Bachtel
Torin Sandall