Bug 1373296 - Document needed setup of OpenShift admission control plugin needed for the OpenScap integration
Summary: Document needed setup of OpenShift admission control plugin needed for the O...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Documentation
Version: 5.6.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: GA
: 5.7.0
Assignee: Andrew Dahms
QA Contact: Red Hat CloudForms Documentation
URL:
Whiteboard: doc
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-09-05 21:00 UTC by Mooli Tayer
Modified: 2017-05-08 00:48 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-05-08 00:48:24 UTC
Category: ---
Cloudforms Team: ---
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Mooli Tayer 2016-09-05 21:00:54 UTC 
Once configured, the admission control plugin in OpenShift Will prevent usage of images annotated with 'images.openshift.io/deny-execution'.

This annotation is added during the control action container_image_annotate_deny_execution. Entities connected to the 'OpenSCAP Profile' included with the system will have images annotated if they do not meet a minimum SCAP compliance level.

OpenShift Documentation PR: openshift/openshift-docs: Pull Request 2647
Admission Control was added in: openshift/origin: Pull Request 8995
Comment 2 Mooli Tayer 2016-09-05 21:05:32 UTC 
OpenShift Documentation PR: https://github.com/openshift/openshift-docs/pull/2647
Admission Control was added in: https://github.com/openshift/origin/pull/8995
Comment 3 Mooli Tayer 2016-09-05 21:14:49 UTC 
Davif the admission control plugin will be added to OpenShift enterprise in version 3.3, right?
Comment 4 David Eads 2016-09-06 11:41:29 UTC 
> Davif the admission control plugin will be added to OpenShift enterprise in version 3.3, right?

Correct.
Comment 5 Mooli Tayer 2016-09-23 01:31:55 UTC 
Chris I need help moving this forward.

Also Can I Send a PR somewhere?
Thanks!
Comment 9 Andrew Dahms 2017-05-08 00:48:24 UTC 
The attached PR has since been merged and closed out on the OpenShift side, so I am closing this bug.
Note You need to log in before you can comment on or make changes to this bug.