Added missing option 'audit-match-kind-only' to helm (#1245)

Signed-off-by: Eike Wichern <13048266+e96wic@users.noreply.github.com>
open-policy-agent · Apr 13, 2021 · 4b4ae44 · 4b4ae44
1 parent e93018d
commit 4b4ae44
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 0 deletions.
diff --git a/cmd/build/helmify/kustomize-for-helm.yaml b/cmd/build/helmify/kustomize-for-helm.yaml
@@ -100,6 +100,7 @@ spec:
             - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
             - --audit-from-cache={{ .Values.auditFromCache }}
             - --audit-chunk-size={{ .Values.auditChunkSize }}
+            - --audit-match-kind-only={{ .Values.auditMatchKindOnly }}
             - --emit-audit-events={{ .Values.emitAuditEvents }}
             - --operation=audit
             - --operation=status

diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
@@ -74,6 +74,7 @@ _See [Exempting Namespaces](https://open-policy-agent.github.io/gatekeeper/websi
 | constraintViolationsLimit           | The maximum # of audit violations reported on a constraint                                                                                                                                             | `20`                                                                      |
 | auditFromCache                      | Take the roster of resources to audit from the OPA cache                                                                                                                                               | `false`                                                                   |
 | auditChunkSize                      | Chunk size for listing cluster resources for audit (alpha feature)                                                                                                                                     | `0`                                                                       |
+| auditMatchKindOnly                  | Only check resources of the kinds specified in all constraints defined in the cluster.                                                                                                                 | `false`                                                                   |
 | disableValidatingWebhook            | Disable the validating webhook                                                                                                                                                                         | `false`                                                                   |
 | validatingWebhookTimeoutSeconds     | The timeout for the validating webhook in seconds                                                                                                                                                      | `3`                                                                       |
 | enableDeleteOperations              | Enable validating webhook for delete operations                                                                                                                                                        | `false`                                                                   |

diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -1,5 +1,6 @@
 replicas: 3
 auditInterval: 60
+auditMatchKindOnly: false
 constraintViolationsLimit: 20
 auditFromCache: false
 disableValidatingWebhook: false

diff --git a/manifest_staging/charts/gatekeeper/README.md b/manifest_staging/charts/gatekeeper/README.md
@@ -74,6 +74,7 @@ _See [Exempting Namespaces](https://open-policy-agent.github.io/gatekeeper/websi
 | constraintViolationsLimit           | The maximum # of audit violations reported on a constraint                                                                                                                                             | `20`                                                                      |
 | auditFromCache                      | Take the roster of resources to audit from the OPA cache                                                                                                                                               | `false`                                                                   |
 | auditChunkSize                      | Chunk size for listing cluster resources for audit (alpha feature)                                                                                                                                     | `0`                                                                       |
+| auditMatchKindOnly                  | Only check resources of the kinds specified in all constraints defined in the cluster.                                                                                                                 | `false`                                                                   |
 | disableValidatingWebhook            | Disable the validating webhook                                                                                                                                                                         | `false`                                                                   |
 | validatingWebhookTimeoutSeconds     | The timeout for the validating webhook in seconds                                                                                                                                                      | `3`                                                                       |
 | enableDeleteOperations              | Enable validating webhook for delete operations                                                                                                                                                        | `false`                                                                   |

diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml
@@ -46,6 +46,7 @@ spec:
         - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
         - --audit-from-cache={{ .Values.auditFromCache }}
         - --audit-chunk-size={{ .Values.auditChunkSize }}
+        - --audit-match-kind-only={{ .Values.auditMatchKindOnly }}
         - --emit-audit-events={{ .Values.emitAuditEvents }}
         - --operation=audit
         - --operation=status

diff --git a/manifest_staging/charts/gatekeeper/values.yaml b/manifest_staging/charts/gatekeeper/values.yaml
@@ -1,5 +1,6 @@
 replicas: 3
 auditInterval: 60
+auditMatchKindOnly: false
 constraintViolationsLimit: 20
 auditFromCache: false
 disableValidatingWebhook: false