mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-13 19:28:55 +00:00
Code Activity

[kyverno helm chart] make webhook pod annotations configurable (#9875)

Browse source 
* make webhook pod annotations configurable

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* run make codegen-helm-all

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

---------

Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: shuting <shuting@nirmata.com>
This commit is contained in:
André Bauer 2024-04-18 11:31:29 +02:00 • committed by GitHub
parent 31905ebee6
commit 693010563f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
charts/kyverno/README.md
View file

@ -275,6 +275,7 @@ The chart values are organised per component.
| crds.migration.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
| crds.migration.podAffinity | object | `{}` | Pod affinity constraints. |
| crds.migration.podLabels | object | `{}` | Pod labels. |
| crds.migration.podAnnotations | object | `{}` | Pod annotations. |
| crds.migration.nodeAffinity | object | `{}` | Node affinity constraints. |
| crds.migration.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |
@ -700,6 +701,7 @@ The chart values are organised per component.
| webhooksCleanup.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
| webhooksCleanup.podAffinity | object | `{}` | Pod affinity constraints. |
| webhooksCleanup.podLabels | object | `{}` | Pod labels. |
| webhooksCleanup.podAnnotations | object | `{}` | Pod annotations. |
| webhooksCleanup.nodeAffinity | object | `{}` | Node affinity constraints. |
| webhooksCleanup.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |
@ -796,6 +798,7 @@ The chart values are organised per component.
| policyReportsCleanup.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
| policyReportsCleanup.podAffinity | object | `{}` | Pod affinity constraints. |
| policyReportsCleanup.podLabels | object | `{}` | Pod labels. |
| policyReportsCleanup.podAnnotations | object | `{}` | Pod annotations. |
| policyReportsCleanup.nodeAffinity | object | `{}` | Node affinity constraints. |
| policyReportsCleanup.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |

4
charts/kyverno/templates/hooks/post-upgrade-clean-reports.yaml
View file

@ -14,6 +14,10 @@ spec:
backoffLimit: 2
template:
metadata:
{{- with .Values.policyReportsCleanup.podAnnotations }}
annotations:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- with .Values.policyReportsCleanup.podLabels }}
labels:
{{- toYaml . | nindent 8 }}

4
charts/kyverno/templates/hooks/post-upgrade-migrate-resources.yaml
View file

@ -78,6 +78,10 @@ spec:
backoffLimit: 2
template:
metadata:
{{- with .Values.crds.migration.podAnnotations }}
annotations:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- with .Values.crds.migration.podLabels }}
labels:
{{- toYaml . | nindent 8 }}

4
charts/kyverno/templates/hooks/pre-delete-scale-to-zero.yaml
View file

@ -14,6 +14,10 @@ spec:
backoffLimit: 2
template:
metadata:
{{- with .Values.webhooksCleanup.podAnnotations }}
annotations:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- with .Values.webhooksCleanup.podLabels }}
labels:
{{- toYaml . | nindent 8 }}

9
charts/kyverno/values.yaml
View file

@ -148,6 +148,9 @@ crds:
# -- Pod labels.
podLabels: {}
# -- Pod annotations.
podAnnotations: {}
# -- Node affinity constraints.
nodeAffinity: {}
@ -498,6 +501,9 @@ webhooksCleanup:
# -- Pod labels.
podLabels: {}
# -- Pod annotations.
podAnnotations: {}
# -- Node affinity constraints.
nodeAffinity: {}
@ -553,6 +559,9 @@ policyReportsCleanup:
# -- Pod labels.
podLabels: {}
# -- Pod annotations.
podAnnotations: {}
# -- Node affinity constraints.
nodeAffinity: {}