Show warnings in Helm chart installation; update issue templates (#3673)

* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update PR template with test checklist reminders

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add "other" issue template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add "triage" label to all new issues

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* notes change

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* show warnings

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version numbers in issue templates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add CI file per comments

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* new line for linting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* stop being smart

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove ci file

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

.github/ISSUE_TEMPLATE/bug-cli.yaml

@@ -16,7 +16,10 @@ body:
       options:
         - 1.4.x
         - 1.5.x
-        - 1.6.x
+        - 1.6.0
+        - 1.6.1
+        - 1.6.2
+        - 1.7.0
     validations:
       required: true
   - type: textarea

.github/ISSUE_TEMPLATE/bug-other.yaml

@@ -15,7 +15,10 @@ body:
       options:
         - 1.4.x
         - 1.5.x
-        - 1.6.x
+        - 1.6.0
+        - 1.6.1
+        - 1.6.2
+        - 1.7.0
     validations:
       required: true
   - type: textarea

.github/ISSUE_TEMPLATE/bug-webhook.yaml

@@ -15,7 +15,10 @@ body:
       options:
         - 1.4.x
         - 1.5.x
-        - 1.6.x
+        - 1.6.0
+        - 1.6.1
+        - 1.6.2
+        - 1.7.0
     validations:
       required: true
   - type: dropdown

charts/kyverno/templates/NOTES.txt

@@ -1,19 +1,16 @@
-Thank you for installing {{ .Chart.Name }} {{ .Chart.Version }} 😀
+Chart version: {{ .Chart.Version }}
+Kyverno version: {{ default .Chart.AppVersion (default .Values.image.tag .Values.initImage.tag) }}
 
-Your release is named {{ .Release.Name }}, app version {{ default .Chart.AppVersion (default .Values.image.tag .Values.initImage.tag) }}
+Thank you for installing {{ .Chart.Name }}! Your release is named {{ .Release.Name }}.
 
 {{- if not .Values.replicaCount }}
-WARNING: Setting replicas count below 3 means Kyverno is not running in high availability mode.
+⚠️  WARNING: Setting replicas count below 3 means Kyverno is not running in high availability mode.
 {{- else if lt .Values.replicaCount 3 }}
-WARNING: Setting replicas count below 3 means Kyverno is not running in high availability mode.
+⚠️  WARNING: Setting replicas count below 3 means Kyverno is not running in high availability mode.
 {{- end }}
 
-{{- if empty .Values.config.webhooks }}
+💡 Note: There is a trade-off when deciding which approach to take regarding Namespace exclusions. Please see the documentation at https://kyverno.io/installation/#security-vs-operability to understand the risks.
-WARNING: Kyverno has been installed with no Namespace exclusions which may prevent normal cluster operations in cluster or Node failure scenarios. Please see the documentation at https://kyverno.io/installation/#security-vs-operability to understand the risks.
-{{- else }}
-WARNING: Kyverno has been installed and some Namespaces and/or resources have been excluded from webhooks. Please see the documentation at https://kyverno.io/installation/#security-vs-operability to understand the risks.
-{{- end }}
 
 {{- if semverCompare "<1.21.0" .Capabilities.KubeVersion.Version }}
-WARNING: The minimal Kubernetes version officially supported by Kyverno is 1.21. We don't run tests against previous versions and Kyverno is not guaranteed to work with Kubernetes {{ .Capabilities.KubeVersion.Version }}.
+⚠️  WARNING: The minimal Kubernetes version officially supported by Kyverno is 1.21. Earlier versions are untested and Kyverno is not guaranteed to work with Kubernetes {{ .Capabilities.KubeVersion.Version }}.
 {{- end }}

charts/kyverno/values.yaml

@@ -261,14 +261,15 @@ config:
   # Note that it takes a list of `namespaceSelector` and/or `objectSelector` in the JSON format, and only the first element
   # will be forwarded to the webhook configurations.
   webhooks:
-    # Exlude namespaces
+    # Exclude namespaces
     # - namespaceSelector:
     #     matchExpressions:
-    #     - key: environment
+    #     - key: kubernetes.io/metadata.name
     #       operator: In
     #       values:
-    #         - prod
+    #         - kube-system
-    # Exlude objects
+            # - kyverno
+    # Exclude objects
     # - objectSelector:
     #     matchExpressions:
     #     - key: webhooks.kyverno.io/exclude