Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement Policy lifecycle reconcilers #1021

Open
8 tasks
fabriziosestito opened this issue Feb 26, 2025 · 0 comments
Open
8 tasks

Implement Policy lifecycle reconcilers #1021

fabriziosestito opened this issue Feb 26, 2025 · 0 comments

Comments

@fabriziosestito
Copy link
Contributor

fabriziosestito commented Feb 26, 2025

Description

Update the Kubewarden controller to manage (Cluster)PolicyRevision resources and handle policy lifecycle.

References

Acceptance Criteria

  • Implement controller logic to create PolicyRevisions when policies are created/updated
  • Refactor the current code removing the Pod lifecycle reconciliation
  • Move to a PolicyServer StatefulSet
  • Propagate status conditions from PolicyRevisions to the parent Policy resources
  • Update webhook configurations to point to the correct policy generation endpoints
  • Implement phase management logic for policies (Pending → Active → Updating, etc.)
  • Generate Kubernetes Events for policy status transitions
  • Implement garbage collection for old PolicyRevisions and precompiled modules

Testing

Reevaluate integration tests—are real cluster tests still necessary? Since we're no longer waiting for the Pod restart and are using PolicyRevision for communication between the PolicyServer and the controller, perhaps we could mock the PolicyServer instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: No status
Development

No branches or pull requests

1 participant