Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: Add connect to operations #3785

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

docs: Add connect to operations #3785

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b58b3a4
adding connect to operations.md
malexander2012 Jan 15, 2025
15e7d40
Merge branch 'open-policy-agent:master' into add-connect-operations
malexander2012 Jan 16, 2025
55ac620
moving connect to customize-admissions
malexander2012 Jan 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions website/docs/customize-admission.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,3 +76,15 @@ To enable Delete operations for the `validation.gatekeeper.sh` admission webhook
```

You can now check for deletes.

### How to Enable Validation of Connect Operations

This operation allows gatekeeper to review and validate `kubectl exec` commands via the validation webhook.

To enable Connect operations for the `validation.gatekeeper.sh` admission webhook, add "CONNECT" to the list of operations in the `gatekeeper-validating-webhook-configuration`.
```yaml
operations:
- CREATE
- UPDATE
- CONNECT
```
2 changes: 1 addition & 1 deletion website/docs/operations.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -159,7 +159,7 @@ __--operation key:__ `mutation-controller`
This operation runs the process responsible for ingesting and registering
mutators. `mutation-controller` is run implicitly with the `mutation-webhook`
and `mutation-status` operations, and is redundant if any of the 2
aforementioned operations are already specified.
aforementioned operations are already specified.

If the `webhook` or `audit` operation is used in isolation without the `mutation-webhook`
or `mutation-status` operations, then the `mutation-controller` operation is
Expand Down