Merge pull request #141 from bytedance/fix-vcpol-controller

fix: Set clusterScope to true in vcpol controller
bytedance · Dec 4, 2024 · d019561 · d019561
2 parents 349f4c0 + ef6c85b
commit d019561
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/internal/policy/clusterpolicy_controller.go b/internal/policy/clusterpolicy_controller.go
@@ -529,10 +529,10 @@ func (c *ClusterPolicyController) syncClusterPolicy(key string) error {
 	}
 
 	newPolicy := false
-	apName := varmorprofile.GenerateArmorProfileName(varmorconfig.Namespace, vcp.Name, false)
+	apName := varmorprofile.GenerateArmorProfileName(varmorconfig.Namespace, vcp.Name, true)
 	ap, err := c.varmorInterface.ArmorProfiles(varmorconfig.Namespace).Get(context.Background(), apName, metav1.GetOptions{})
 	if err == nil {
-		if policyOwnArmorProfile(vcp, ap, false) {
+		if policyOwnArmorProfile(vcp, ap, true) {
 			// VarmorClusterPolicy update event
 			logger.V(3).Info("processing VarmorClusterPolicy update event")
 			return c.handleUpdateVarmorClusterPolicy(vcp, ap)