5.2. Enabling admission controller enforcement

You can enable admission controller enforcement from the Clusters view when you install Sensor or edit an existing cluster configuration.

When installing a cluster by using the Operator, Helm, or roxctl CLI methods, follow the instructions in "Installing Secured Cluster services for RHACS on Red Hat OpenShift" and "Installing Secured Cluster services for RHACS on other platforms" to enable admission controller enforcement during installation.
When installing a cluster by using the legacy installation method, follow these steps:
1. In the RHACS portal, select Platform Configuration Clusters.
2. Click Secure a cluster Legacy installation method.
3. In the Dynamic configuration (syncs with Sensor) section, in the Admission controller enforcement behavior field, select Enforce policies.
4. Select Next.
5. Select Finish. RHACS automatically synchronizes the admission controller and applies the changes.

Verification

The ValidatingWebhookConfiguration Kubernetes resource contains information about enforcement configuration behavior. The configuration settings are available in the admission controller logs.