From 9834feea74888a5c8515916f9b1a5623a606881f Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Thu, 7 Apr 2022 14:31:14 -0700 Subject: [PATCH] update image pull policy for YAML install which uses :latest (#3565) Signed-off-by: Jim Bugwadia --- config/install.yaml | 4 ++-- config/manifest/deployment.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/install.yaml b/config/install.yaml index 84a4259674..6f6d1cefb8 100644 --- a/config/install.yaml +++ b/config/install.yaml @@ -10986,7 +10986,7 @@ spec: - name: TUF_ROOT value: /.sigstore image: ghcr.io/kyverno/kyverno:latest - imagePullPolicy: IfNotPresent + imagePullPolicy: Always livenessProbe: failureThreshold: 2 httpGet: @@ -11041,7 +11041,7 @@ spec: fieldRef: fieldPath: metadata.namespace image: ghcr.io/kyverno/kyvernopre:latest - imagePullPolicy: IfNotPresent + imagePullPolicy: Always name: kyverno-pre resources: limits: diff --git a/config/manifest/deployment.yaml b/config/manifest/deployment.yaml index 03a74d2b99..519b7c6e7b 100755 --- a/config/manifest/deployment.yaml +++ b/config/manifest/deployment.yaml @@ -42,7 +42,7 @@ spec: initContainers: - name: kyverno-pre image: ghcr.io/kyverno/kyvernopre:latest - imagePullPolicy: IfNotPresent + imagePullPolicy: Always resources: limits: cpu: 100m @@ -68,7 +68,7 @@ spec: containers: - name: kyverno image: ghcr.io/kyverno/kyverno:latest - imagePullPolicy: IfNotPresent + imagePullPolicy: Always args: - "--filterK8sResources=[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,kyverno*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]" # customize webhook timeout