[kyverno helm chart] make webhook pod annotations configurable (#9875)

* make webhook pod annotations configurable

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* run make codegen-helm-all

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

---------

Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: shuting <shuting@nirmata.com>

charts/kyverno/README.md

@@ -275,6 +275,7 @@ The chart values are organised per component.
 | crds.migration.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
 | crds.migration.podAffinity | object | `{}` | Pod affinity constraints. |
 | crds.migration.podLabels | object | `{}` | Pod labels. |
+| crds.migration.podAnnotations | object | `{}` | Pod annotations. |
 | crds.migration.nodeAffinity | object | `{}` | Node affinity constraints. |
 | crds.migration.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |
 
@@ -700,6 +701,7 @@ The chart values are organised per component.
 | webhooksCleanup.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
 | webhooksCleanup.podAffinity | object | `{}` | Pod affinity constraints. |
 | webhooksCleanup.podLabels | object | `{}` | Pod labels. |
+| webhooksCleanup.podAnnotations | object | `{}` | Pod annotations. |
 | webhooksCleanup.nodeAffinity | object | `{}` | Node affinity constraints. |
 | webhooksCleanup.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |
 
@@ -796,6 +798,7 @@ The chart values are organised per component.
 | policyReportsCleanup.podAntiAffinity | object | `{}` | Pod anti affinity constraints. |
 | policyReportsCleanup.podAffinity | object | `{}` | Pod affinity constraints. |
 | policyReportsCleanup.podLabels | object | `{}` | Pod labels. |
+| policyReportsCleanup.podAnnotations | object | `{}` | Pod annotations. |
 | policyReportsCleanup.nodeAffinity | object | `{}` | Node affinity constraints. |
 | policyReportsCleanup.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the hook containers |
 

charts/kyverno/templates/hooks/post-upgrade-clean-reports.yaml

@@ -14,6 +14,10 @@ spec:
   backoffLimit: 2
   template:
     metadata:
+      {{- with .Values.policyReportsCleanup.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.policyReportsCleanup.podLabels }}
       labels:
         {{- toYaml . | nindent 8 }}

charts/kyverno/templates/hooks/post-upgrade-migrate-resources.yaml

@@ -78,6 +78,10 @@ spec:
   backoffLimit: 2
   template:
     metadata:
+      {{- with .Values.crds.migration.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.crds.migration.podLabels }}
       labels:
         {{- toYaml . | nindent 8 }}

charts/kyverno/templates/hooks/pre-delete-scale-to-zero.yaml

@@ -14,6 +14,10 @@ spec:
   backoffLimit: 2
   template:
     metadata:
+      {{- with .Values.webhooksCleanup.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.webhooksCleanup.podLabels }}
       labels:
         {{- toYaml . | nindent 8 }}

charts/kyverno/values.yaml

@@ -148,6 +148,9 @@ crds:
     # -- Pod labels.
     podLabels: {}
 
+    # -- Pod annotations.
+    podAnnotations: {}
+
     # -- Node affinity constraints.
     nodeAffinity: {}
 
@@ -498,6 +501,9 @@ webhooksCleanup:
   # -- Pod labels.
   podLabels: {}
 
+  # -- Pod annotations.
+  podAnnotations: {}
+
   # -- Node affinity constraints.
   nodeAffinity: {}
 
@@ -553,6 +559,9 @@ policyReportsCleanup:
   # -- Pod labels.
   podLabels: {}
 
+  # -- Pod annotations.
+  podAnnotations: {}
+
   # -- Node affinity constraints.
   nodeAffinity: {}