rancher-charts/packages/rancher-gatekeeper/generated-changes/patch
Mauren Berti f50b5dc1f7
Add new PSP flag + add validation for capabilities.
* Remove previously added capabilities check.
* Add new validation file validate-psp-install.yaml with capabilities and switch check to verify PSPs are installable in the target cluster.
* Remove old PSP flags and replace them with the standardized global.cattle.psp.enabled.
* Add explanation of the changes for Kubernetes v1.25 to app-readme.md.
2023-01-27 19:38:30 -05:00
..
templates Add new PSP flag + add validation for capabilities. 2023-01-27 19:38:30 -05:00
Chart.yaml.patch rancher gatekeeper updated to 3.10.0 2022-12-07 13:07:58 +05:30
README.md.patch rancher gatekeeper updated to 3.10.0 2022-12-07 13:07:58 +05:30
values.yaml.patch Add new PSP flag + add validation for capabilities. 2023-01-27 19:38:30 -05:00

README.md.patch

--- charts-original/README.md
+++ charts/README.md
@@ -114,7 +114,7 @@
 | crds.nodeSelector                             | The node selector to use for pod scheduling in crds hook jobs                                                                                                                                                                               | `kubernetes.io/os: linux`                                                         |
 | crds.resources                                | The resource request/limits for the container image in crds hook jobs                                                                                                                                                                       | `{}`                                                                              |
 | crds.securityContext                          | Security context applied to the container                                                                                                                                                                                                           | `{ "allowPrivilegeEscalation": false, "capabilities": "drop": [all], "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532 }` |
-| auditInterval                                 | The frequency with which audit is run                                                                                                                                                                                                               | `60`                                                                      |
+| auditInterval                                 | The frequency with which audit is run                                                                                                                                                                                                               | `300`                                                                      |
 | constraintViolationsLimit                     | The maximum # of audit violations reported on a constraint                                                                                                                                                                                          | `20`                                                                      |
 | auditFromCache                                | Take the roster of resources to audit from the OPA cache                                                                                                                                                                                            | `false`                                                                   |
 | auditChunkSize                                | Chunk size for listing cluster resources for audit (alpha feature)                                                                                                                                                                                  | `500`                                                                       |