PolicySets and Placement

`policyset-blastwall-test`

File:

policies/base/policyset-blastwall.yaml

Policies:

policy-spo-rawselinuxprofile-crd
policy-blastwall-v2-raw-profiles
policy-blastwall-v2-profile-usage
policy-blastwall-v2-runtime-bindings

PlacementBinding:

policies/overlays/test-spo-cluster-scoped/placementbinding-blastwall.yaml

Validate:

oc get policyset -n acm-spo-policies policyset-blastwall-test
oc get placementbinding -n acm-spo-policies binding-policyset-blastwall-test

File:

policies/base/policyset-spo.yaml

Policies:

policy-install-spo-operator
policy-prevent-copy-fail-cve-ds

PlacementBinding:

policies/overlays/test-spo-cluster-scoped/placementbinding.yaml

Validate:

oc get policyset -n acm-spo-policies policyset-spo-test
oc get placementbinding -n acm-spo-policies binding-policyset-spo-test

File:

policies/overlays/test-spo-cluster-scoped/placement.yaml

Selects managed clusters with:

spo: "true"

Both PolicySets use this Placement.

Validate placement decisions:

oc get placementdecision -n acm-spo-policies -o yaml