Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DO NOT MERGE] - Refactor asset-manager clamav labels #2926

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

nimalank7
Copy link
Contributor

Description:

  • Currently clamav-pvc will match onto any PersistentVolume with app.kubernetes.io/instance: asset-manager as this is contained in asset-manager.selectorLabels. However if another PersistentVolume were to be deployed with asset-manager.selectorLabels there is a chance it will match onto that rather than clamav-pv which is the wrong result
  • Ensure it only matches on labels that end in -clamav-db preventing this mixup
  • As part of Roll out PSS Restricted profile. #1883

Description:
- Currently `clamav-pvc` will match onto any `PersistentVolume` with `app.kubernetes.io/instance: asset-manager` as this is contained in `asset-manager.selectorLabels`. However if another `PersistentVolume` were to be deployed with `asset-manager.selectorLabels` there is a chance it will match onto that rather than `clamav-pv` which is the wrong result
- Ensure it only matches on labels that end in `-clamav-db` preventing this mixup
- As part of #1883
@nimalank7 nimalank7 changed the title Refactor asset-manager clamav labels [DO NOT MERGE] - Refactor asset-manager clamav labels Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants