validation-parameters fix

Author: k8sautom8

defaults/.main.yml.swp

@@ -273,8 +273,8 @@ admission_control_eventratelimit_file: "admission-eventratelimit.yaml" # the fil
 
 # ValidatingAdmissionPolicy
 # NOTE: Section 5 requires Kubernetes version v1.30.0 and above
-vap_exclude_system_namespace_crd: "vap-exclude-system-namespace-crd.yml"
-vap_cis_exclude_system_namespace_params: "vap-cis-exclude-system-namespace-params.yml" # Please verify the namespaceExclusion
+vap_cis_validation_parameters_crd: "vap-cis-validation-parameters-crd.yml"
+vap_cis_validation_parameters: "vap-cis-validation-parameters.yml" # Please verify the excludeSystemNamespaces, allowedRegistries, maxReplicas
 vap_cis_enforce_runasnonroot_policy: "vap-cis-enforce-runasnonroot-policy.yml"
 vap_cis_enforce_runasnonroot_policy_binding: "vap-cis-enforce-runasnonroot-policy-binding.yml"
 vap_cis_minimize_addition_of_limited_capabilities_policy: "vap-cis-minimize-addition-of-limited-capabilities-policy.yml"

defaults/main.yml

@@ -8,16 +8,16 @@
     until: apiserver_start_5_0_0.stdout|length > 0
     retries: 120
     delay: 1
-  - name: "5.0.0 | PRE-REQ | Apply CRD for ValidatingAdmissionPolicy {{ vap_exclude_system_namespace_crd }}"
+  - name: "5.0.0 | PRE-REQ | Apply CRD for ValidatingAdmissionPolicy {{ vap_cis_validation_parameters_crd }}"
     ansible.builtin.command: kubectl --kubeconfig={{ kubeconfig_path }} apply -f -
     args:
-      stdin: "{{ lookup('file', vap_exclude_system_namespace_crd) }}"
+      stdin: "{{ lookup('file', vap_cis_validation_parameters_crd) }}"
     register: crd_5_0_0
     changed_when: "'created' in crd_5_0_0.stdout"
-  - name: "5.0.0 | PRE-REQ | Apply Paramerters for ValidatingAdmissionPolicy {{ vap_cis_exclude_system_namespace_params }}"
+  - name: "5.0.0 | PRE-REQ | Apply Paramerters for ValidatingAdmissionPolicy {{ vap_cis_validation_parameters }}"
     ansible.builtin.command: kubectl --kubeconfig={{ kubeconfig_path }} apply -f -
     args:
-      stdin: "{{ lookup('file', vap_cis_exclude_system_namespace_params) }}"
+      stdin: "{{ lookup('file', vap_cis_validation_parameters) }}"
     register: params_5_0_0
     changed_when: "'created' in params_5_0_0.stdout"
   run_once: true