Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted (#2218)

* Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make E2E tests work with new chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Seems Helm lint needs values.yaml

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Can't use ct install for the CRDs because will end up getting uninstalled after test

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Ensure helm release accounts for new CRD chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update CRD chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make CRD chart version match main kyverno chart version

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

.github/workflows/e2e.yaml

@@ -99,7 +99,8 @@ jobs:
       - name: Run chart-testing (install)
         run: |
           kubectl create namespace kyverno
-          ct install --target-branch=main --namespace=kyverno
+          helm install kyverno-crds charts/kyverno-crds -n kyverno
+          ct install --target-branch=main --namespace=kyverno --charts charts/kyverno
 
       - name: Debug failure
         if: failure()

.github/workflows/helm-release.yaml

@@ -4,6 +4,7 @@ on:
     branches:
       - 'main'
     paths:
+      - 'charts/kyverno-crds/Chart.yaml'
       - 'charts/kyverno/Chart.yaml'
       - '.github/workflows/helm-release.yaml'
 

Makefile

@@ -210,7 +210,7 @@ godownloader:
 # kustomize-crd will create install.yaml
 kustomize-crd:
 	# Create CRD for helm deployment Helm
-	kustomize build ./definitions/crds > ./charts/kyverno/crds/crds.yaml
+	kustomize build ./definitions/crds > ./charts/kyverno-crds/templates/crds.yaml
 	# Generate install.yaml that have all resources for kyverno
 	kustomize build ./definitions > ./definitions/install.yaml
 	# Generate install_debug.yaml that for developer testing

charts/kyverno-crds/Chart.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+name: kyverno-crds
+version: v2.0.2
+appVersion: v1.4.2
+icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
+description: Kubernetes Native Policy Management CRDs
+keywords:
+  - kubernetes
+  - nirmata
+  - policy agent
+  - validating webhook
+  - admissions controller
+home: https://kyverno.io/
+sources:
+  - https://github.com/kyverno/kyverno
+maintainers:
+  - name: Nirmata
+    url: https://kyverno.io/
+engine: gotpl
+kubeVersion: ">=1.10.0-0"

charts/kyverno/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: kyverno
-version: v2.0.1
+version: v2.0.2
 appVersion: v1.4.2
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management