Adding two helper functions for VAP and CEL admission library #1682
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overview
In this PR I am adding two simple CLI commands related to VAP (Validating Admission Policies) and Kubescape's CEL Admission Policy Library.
One is
kubescape vap-helper deploy-library
that downloads release artifacts from the CEL Admission Policy Library repo (policies) and prints it to the STDOUT (so it can be used in conjunction with| kubectl apply -f
)The second is
kubescape vap-helper create-policy-binding --name my-policy-binding --policy C-0012 --namespace test
command that creates a policy binding object YAML and prints it to STDOUT (so it can be used in conjunction with| kubectl apply -f
as well)Checklist before requesting a review