Protect Resources From Deletion/Modification

KubeRocketCI allows to prevent accidental resource deletion and modification by applying a protected label. This page describes the protected label feature, its purpose, types, and usage.

Overview

Protected label is a Kubernetes label that tells KubeRocketCI to block any delete or edit operations with the resource. The platform checks the label first before performing an operation with the resource.

Protected labels support the following resources:

• Codebases;
• Codebase branches;
• Deployments;
• Environments.

Protection Types

Protection label can optionally block specific operations over a resource:

• app.edp.epam.com/edit-protection: delete-update - Blocks both the delete and modify operations;
• app.edp.epam.com/edit-protection: delete - Blocks only delete operations;
• app.edp.epam.com/edit-protection: update - Blocks only modify operations.

Apply Protected Label

To apply the resource deletion and modification block, follow the steps below. We will use a codebase resource as an example, but the procedure applies to all the supported resources:

1. Open the terminal which has access to the cluster that runs KubeRocketCI.

2. Get the codebase list:

kubectl get codebase -n krci

3. Define the codebase you want to protect from accidental deletion and/or modification.

4. Enter the resource edit menu:

kubectl edit codebase <codebase name> -n krci

5. In the labels section of the codebase specifications, add the label from the Protection Types list.

6. Save and quit the menu.

Remove Protected Label

To remove a label, navigate back to the resource, edit the resource by removing the label, and save the changes.

Related Articles

• Manage Applications
• Customize Deploy Pipeline
• Add Deployment Flow
• Manage Deployments