Spike | Same policy with different configurations in the same cluster

[MostafaMegahid]

Background

Currently, if we want to use the same policy with two different configurations (Parameters, Targets, .etc), we assume that's possible using Kustomization layers. However, that will only work if we want different configs for different clusters, but not on the same cluster, which makes it impossible to enforce same policy on different applications/namespaces with different configurations.

Objective

The objective of the spike is to explore ways to enforce the same policy on different applications/namespaces.

Remarks

• We should explore using the policyConfig concept.

[waleedhammam]

Progress

• implement CRD in policy agent & define new API
• Modify validator to use config and override policy parameters
• Implement controller to restrict creating multiple configs for the same target
• Testing