diff --git a/pkg/operator/controllers/guardrails/policies/gktemplates-src/library/common.rego b/pkg/operator/controllers/guardrails/policies/gktemplates-src/library/common.rego index 2f17d734a16..8acf81cbcbf 100644 --- a/pkg/operator/controllers/guardrails/policies/gktemplates-src/library/common.rego +++ b/pkg/operator/controllers/guardrails/policies/gktemplates-src/library/common.rego @@ -58,6 +58,7 @@ is_priv_namespace(ns) = true { exempted_user = { "system:kube-controller-manager", + "system:kube-scheduler", "system:admin" # comment out temporarily for testing in console } diff --git a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-delete-pull-secret.yaml b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-delete-pull-secret.yaml index 62dc78e1d90..4381732c4d4 100644 --- a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-delete-pull-secret.yaml +++ b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-delete-pull-secret.yaml @@ -86,6 +86,7 @@ spec: exempted_user = { "system:kube-controller-manager", + "system:kube-scheduler", "system:admin" # comment out temporarily for testing in console } diff --git a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-machine-config.yaml b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-machine-config.yaml index 8de8a581b54..38f87b51bd3 100644 --- a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-machine-config.yaml +++ b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-machine-config.yaml @@ -91,6 +91,7 @@ spec: exempted_user = { "system:kube-controller-manager", + "system:kube-scheduler", "system:admin" # comment out temporarily for testing in console } diff --git a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-master-toleration-taints.yaml b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-master-toleration-taints.yaml index b752bf2232d..85a5e6daec1 100644 --- a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-master-toleration-taints.yaml +++ b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-master-toleration-taints.yaml @@ -110,6 +110,7 @@ spec: exempted_user = { "system:kube-controller-manager", + "system:kube-scheduler", "system:admin" # comment out temporarily for testing in console } diff --git a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-privileged-namespace.yaml b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-privileged-namespace.yaml index d7bfc12cbca..2810c15ced1 100644 --- a/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-privileged-namespace.yaml +++ b/pkg/operator/controllers/guardrails/policies/gktemplates/aro-deny-privileged-namespace.yaml @@ -108,6 +108,7 @@ spec: exempted_user = { "system:kube-controller-manager", + "system:kube-scheduler", "system:admin" # comment out temporarily for testing in console }