feat: allow pod labels for cleanup jobs (#7808)

Signed-off-by: bakito <github@bakito.ch>

charts/kyverno/Chart.yaml

@@ -48,3 +48,5 @@ annotations:
       description: define resources for cleanupJobs
     - kind: changed
       description: change to enable webhook cleanup hook by default
+    - kind: added
+      description: allow pod labels for cleanup jobs

charts/kyverno/README.md

@@ -651,6 +651,7 @@ The chart values are organised per component.
 | cleanupJobs.admissionReports.resources | object | `{}` | Job resources |
 | cleanupJobs.admissionReports.tolerations | list | `[]` | List of node taints to tolerate |
 | cleanupJobs.admissionReports.podAnnotations | object | `{}` | Pod Annotations |
+| cleanupJobs.admissionReports.podLabels | object | `{}` | Pod labels |
 | cleanupJobs.clusterAdmissionReports.enabled | bool | `true` | Enable cleanup cronjob |
 | cleanupJobs.clusterAdmissionReports.image.registry | string | `nil` | Image registry |
 | cleanupJobs.clusterAdmissionReports.image.repository | string | `"bitnami/kubectl"` | Image repository |
@@ -665,6 +666,7 @@ The chart values are organised per component.
 | cleanupJobs.clusterAdmissionReports.resources | object | `{}` | Job resources |
 | cleanupJobs.clusterAdmissionReports.tolerations | list | `[]` | List of node taints to tolerate |
 | cleanupJobs.clusterAdmissionReports.podAnnotations | object | `{}` | Pod Annotations |
+| cleanupJobs.clusterAdmissionReports.podLabels | object | `{}` | Pod Labels |
 
 ### Other
 

charts/kyverno/templates/cleanup/cleanup-admission-reports.yaml

@@ -19,6 +19,10 @@ spec:
           annotations:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+          {{- with .Values.cleanupJobs.admissionReports.podLabels }}
+          labels:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
         spec:
           serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
           {{- with .Values.cleanupJobs.admissionReports.podSecurityContext }}

charts/kyverno/templates/cleanup/cleanup-cluster-admission-reports.yaml

@@ -19,6 +19,10 @@ spec:
           annotations:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+          {{- with .Values.cleanupJobs.clusterAdmissionReports.podLabels }}
+          labels:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
         spec:
           serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
           {{- with .Values.cleanupJobs.clusterAdmissionReports.podSecurityContext }}

charts/kyverno/values.yaml

@@ -451,6 +451,9 @@ cleanupJobs:
     # -- Pod Annotations
     podAnnotations: {}
 
+    # -- Pod labels
+    podLabels: {}
+
   clusterAdmissionReports:
 
     # -- Enable cleanup cronjob
@@ -507,6 +510,9 @@ cleanupJobs:
     # -- Pod Annotations
     podAnnotations: {}
 
+    # -- Pod Labels
+    podLabels: {}
+
 # Admission controller configuration
 admissionController: