fix: include cel flags on audit deployment (#3414)

Signed-off-by: Noah Reisch <noahreisch4@gmail.com> Co-authored-by: Rita Zhang <rita.z.zhang@gmail.com>
open-policy-agent · Jul 2, 2024 · d730132 · d730132
1 parent 547e2c4
commit d730132
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/cmd/build/helmify/kustomize-for-helm.yaml b/cmd/build/helmify/kustomize-for-helm.yaml
@@ -184,6 +184,8 @@ spec:
             - HELMSUBST_DEPLOYMENT_AUDIT_LOGFILE
             - --disable-cert-rotation={{ or .Values.audit.disableCertRotation .Values.externalCertInjection.enabled }}
             - --external-data-provider-response-cache-ttl={{ .Values.externaldataProviderResponseCacheTTL }}
+            - --experimental-enable-k8s-native-validation={{ .Values.enableK8sNativeValidation }}
+            - --vap-enforcement={{ .Values.vapEnforcement }}
           imagePullPolicy: "{{ .Values.image.pullPolicy }}"
           HELMSUBST_AUDIT_CONTROLLER_MANAGER_DEPLOYMENT_IMAGE_RELEASE: ""
           ports:

diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml
@@ -87,6 +87,8 @@ spec:
         {{- end }}
         - --disable-cert-rotation={{ or .Values.audit.disableCertRotation .Values.externalCertInjection.enabled }}
         - --external-data-provider-response-cache-ttl={{ .Values.externaldataProviderResponseCacheTTL }}
+        - --experimental-enable-k8s-native-validation={{ .Values.enableK8sNativeValidation }}
+        - --vap-enforcement={{ .Values.vapEnforcement }}
         command:
         - /manager
         env: