Bug 1373296

Summary: Document needed setup of OpenShift admission control plugin needed for the OpenScap integration
Product: Red Hat CloudForms Management Engine Reporter: Mooli Tayer <mtayer>
Component: DocumentationAssignee: Andrew Dahms <adahms>
Status: CLOSED CURRENTRELEASE QA Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Severity: high Docs Contact:
Priority: high    
Version: 5.6.0CC: cpelland, deads, fsimonce, hhudgeon, jhardy, mtayer, obarenbo
Target Milestone: GA   
Target Release: 5.7.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: doc
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-05-08 00:48:24 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Mooli Tayer 2016-09-05 21:00:54 UTC 
Once configured, the admission control plugin in OpenShift Will prevent usage of images annotated with 'images.openshift.io/deny-execution'.

This annotation is added during the control action container_image_annotate_deny_execution. Entities connected to the 'OpenSCAP Profile' included with the system will have images annotated if they do not meet a minimum SCAP compliance level.

OpenShift Documentation PR: openshift/openshift-docs: Pull Request 2647
Admission Control was added in: openshift/origin: Pull Request 8995
Comment 2 Mooli Tayer 2016-09-05 21:05:32 UTC 
OpenShift Documentation PR: https://github.com/openshift/openshift-docs/pull/2647
Admission Control was added in: https://github.com/openshift/origin/pull/8995
Comment 3 Mooli Tayer 2016-09-05 21:14:49 UTC 
Davif the admission control plugin will be added to OpenShift enterprise in version 3.3, right?
Comment 4 David Eads 2016-09-06 11:41:29 UTC 
> Davif the admission control plugin will be added to OpenShift enterprise in version 3.3, right?

Correct.
Comment 5 Mooli Tayer 2016-09-23 01:31:55 UTC 
Chris I need help moving this forward.

Also Can I Send a PR somewhere?
Thanks!
Comment 9 Andrew Dahms 2017-05-08 00:48:24 UTC 
The attached PR has since been merged and closed out on the OpenShift side, so I am closing this bug.