governance-policy-spec-sync

README

Governance Policy Spec Sync

Description

The governance policy spec sync is a controller that runs on managed clusters, updating local Policy specs to match Policies in the cluster's namespace on the hub cluster. This controller is a part of the governance-policy-framework.

The operator watches for changes to Policies in the cluster's namespace on the hub cluster to trigger a reconcile. Every reconcile creates/updates/deletes replicated policies on the managed cluster to match the spec from the hub cluster.

Go to the Contributing guide to learn how to get involved.

Geting started

Check the Security guide if you need to report a security issue.

Build and deploy locally

You will need kind installed.

make kind-bootstrap-cluster-dev
make build-images
make kind-deploy-controller-dev

Running tests

make test-dependencies
make test

make e2e-dependencies
make e2e-test

Clean up

make kind-delete-cluster

Updating operator.yaml

The deploy/operator.yaml file is generated via Kustomize. The deploy/rbac directory of Kustomize files is managed by the operator-sdk and Kubebuilder using markers. After updating the markers or any of the Kustomize files, you may regenerate deploy/operator.yaml by running make generate-operator-yaml.

References

• The governance-policy-spec-sync is part of the open-cluster-management community. For more information, visit: open-cluster-management.io.