Add --log-denies option for helm chart (#1158)

Signed-off-by: Paul Kirby <hi@paulkirby.me> Signed-off-by: Paul Kirby <pkirby1124@gmail.com>
open-policy-agent · Mar 3, 2021 · 55eea80 · 55eea80
1 parent 321d8a8
commit 55eea80
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 0 deletions.
diff --git a/cmd/build/helmify/kustomize-for-helm.yaml b/cmd/build/helmify/kustomize-for-helm.yaml
@@ -61,6 +61,7 @@ spec:
           args:
             - --port=8443
             - --logtostderr
+            - --log-denies={{ .Values.logDenies }}
             - --emit-admission-events={{ .Values.emitAdmissionEvents }}
             - --log-level={{ .Values.logLevel }}
             - --exempt-namespace=gatekeeper-system

diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
@@ -13,6 +13,7 @@
 | enableDeleteOperations              | Enable validating webhook for delete operations                                                                                                                                                        | `false`                                                                   |
 | emitAdmissionEvents                 | Emit K8s events in gatekeeper namespace for admission violations (alpha feature)                                                                                                                       | `false`                                                                   |
 | emitAuditEvents                     | Emit K8s events in gatekeeper namespace for audit violations (alpha feature)                                                                                                                           | `false`                                                                   |
+| logDenies                           | Log detailed info on each deny                                                                                                                                                                         | `false`                                                                   |
 | logLevel                            | Minimum log level                                                                                                                                                                                      | `INFO`                                                                    |
 | image.pullPolicy                    | The image pull policy                                                                                                                                                                                  | `IfNotPresent`                                                            |
 | image.repository                    | Image repository                                                                                                                                                                                       | `openpolicyagent/gatekeeper`                                              |

diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -8,6 +8,7 @@ validatingWebhookTimeoutSeconds: 3
 enableDeleteOperations: false
 auditChunkSize: 0
 logLevel: INFO
+logDenies: false
 emitAdmissionEvents: false
 emitAuditEvents: false
 image:

diff --git a/manifest_staging/charts/gatekeeper/README.md b/manifest_staging/charts/gatekeeper/README.md
@@ -13,6 +13,7 @@
 | enableDeleteOperations              | Enable validating webhook for delete operations                                                                                                                                                        | `false`                                                                   |
 | emitAdmissionEvents                 | Emit K8s events in gatekeeper namespace for admission violations (alpha feature)                                                                                                                       | `false`                                                                   |
 | emitAuditEvents                     | Emit K8s events in gatekeeper namespace for audit violations (alpha feature)                                                                                                                           | `false`                                                                   |
+| logDenies                           | Log detailed info on each deny                                                                                                                                                                         | `false`                                                                   |
 | logLevel                            | Minimum log level                                                                                                                                                                                      | `INFO`                                                                    |
 | image.pullPolicy                    | The image pull policy                                                                                                                                                                                  | `IfNotPresent`                                                            |
 | image.repository                    | Image repository                                                                                                                                                                                       | `openpolicyagent/gatekeeper`                                              |

diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml
@@ -43,6 +43,7 @@ spec:
       - args:
         - --port=8443
         - --logtostderr
+        - --log-denies={{ .Values.logDenies }}
         - --emit-admission-events={{ .Values.emitAdmissionEvents }}
         - --log-level={{ .Values.logLevel }}
         - --exempt-namespace=gatekeeper-system

diff --git a/manifest_staging/charts/gatekeeper/values.yaml b/manifest_staging/charts/gatekeeper/values.yaml
@@ -8,6 +8,7 @@ validatingWebhookTimeoutSeconds: 3
 enableDeleteOperations: false
 auditChunkSize: 0
 logLevel: INFO
+logDenies: false
 emitAdmissionEvents: false
 emitAuditEvents: false
 image: