Skip to content

Remove sync-vap-enforcement-scope flag #4302

@JaydipGabani

Description

@JaydipGabani

In the future, once this flag is enabled by default in 3.22, it will be removed in 3.23+(TBD) release. At that point, Gatekeeper will generate VAP resources based on the webhook configuration, Gatekeeper’s configuration resource, and the namespace-exemption flags, combining all applicable enforcement criteria into the resulting VAP resource.

The impact is that if a user has intentionally set this flag to false, their environment may break when relying on VAP resources managed by Gatekeeper, because the enforcement surface of those VAP resources will change.

Sub-issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions