mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 07:26:55 +00:00
Code Activity

feat(cronjobs): Enable podAnnotations on CronJobs (#7366)

Browse source 
Signed-off-by: Justin S <justinseiser@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Justin Seiser 2023-05-31 14:48:07 -04:00 • committed by GitHub
parent 408c00ae93
commit 2521c63b86
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
5 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/kyverno/README.md
View file

@ -625,6 +625,7 @@ The chart values are organised per component.
| cleanupJobs.admissionReports.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the containers |
| cleanupJobs.admissionReports.resources | object | `{}` | Job resources |
| cleanupJobs.admissionReports.tolerations | list | `[]` | List of node taints to tolerate |
| cleanupJobs.admissionReports.podAnnotations | object | `{}` | Pod Annotations |
| cleanupJobs.clusterAdmissionReports.enabled | bool | `true` | Enable cleanup cronjob |
| cleanupJobs.clusterAdmissionReports.image.registry | string | `nil` | Image registry |
| cleanupJobs.clusterAdmissionReports.image.repository | string | `"bitnami/kubectl"` | Image repository |
@ -637,6 +638,7 @@ The chart values are organised per component.
| cleanupJobs.clusterAdmissionReports.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the containers |
| cleanupJobs.clusterAdmissionReports.resources | object | `{}` | Job resources |
| cleanupJobs.clusterAdmissionReports.tolerations | list | `[]` | List of node taints to tolerate |
| cleanupJobs.clusterAdmissionReports.podAnnotations | object | `{}` | Pod Annotations |
### Other

5
charts/kyverno/templates/cleanup/cleanup-admission-reports.yaml
View file

@ -14,6 +14,11 @@ spec:
jobTemplate:
spec:
template:
metadata:
{{- with .Values.cleanupJobs.admissionReports.podAnnotations }}
annotations:
{{- toYaml . | nindent 12 }}
{{- end }}
spec:
serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
{{- with .Values.cleanupJobs.admissionReports.podSecurityContext }}

5
charts/kyverno/templates/cleanup/cleanup-cluster-admission-reports.yaml
View file

@ -14,6 +14,11 @@ spec:
jobTemplate:
spec:
template:
metadata:
{{- with .Values.cleanupJobs.clusterAdmissionReports.podAnnotations }}
annotations:
{{- toYaml . | nindent 12 }}
{{- end }}
spec:
serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
{{- with .Values.cleanupJobs.clusterAdmissionReports.podSecurityContext }}

6
charts/kyverno/values.yaml
View file

@ -434,6 +434,9 @@ cleanupJobs:
# -- List of node taints to tolerate
tolerations: []
# -- Pod Annotations
podAnnotations: {}
clusterAdmissionReports:
# -- Enable cleanup cronjob
@ -483,6 +486,9 @@ cleanupJobs:
# -- List of node taints to tolerate
tolerations: []
# -- Pod Annotations
podAnnotations: {}
# Admission controller configuration
admissionController:

2
config/install-latest-testing.yaml
View file

@ -35719,6 +35719,7 @@ spec:
jobTemplate:
spec:
template:
metadata:
spec:
serviceAccountName: kyverno-cleanup-jobs
containers:
@ -35765,6 +35766,7 @@ spec:
jobTemplate:
spec:
template:
metadata:
spec:
serviceAccountName: kyverno-cleanup-jobs
containers: