Allow setting verbs for clusterrole extraresources on backgroundController (#7380)

* fix webhookCleanup enable switch syntax

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* chore: cleanup codecov workflow (#5829)

* chore: cleanup codecov workflow

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: cleanup codecov workflow

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* updated template file to match with syntax fix

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* align definition of clusterRole extraResources for
backgroundController with adminissionController

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* update test routine clusterRole definition

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* Update scripts/config/standard/kyverno.yaml

fine for me

Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>

* Update charts/kyverno/values.yaml

fine for me 👍

Co-authored-by: shuting <shutting06@gmail.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>

---------

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>

charts/kyverno/templates/background-controller/clusterrole.yaml

@@ -91,19 +91,7 @@ metadata:
   labels:
     {{- include "kyverno.background-controller.labels" $ | nindent 4 }}
 rules:
-  {{- range . }}
-  - apiGroups:
-      {{- toYaml .apiGroups | nindent 6 }}
-    resources:
-      {{- toYaml .resources | nindent 6 }}
-    verbs:
-    - create
-    - update
-    - patch
-    - delete
-    - get
-    - list
-  {{- end }}
+  {{- toYaml . | nindent 2 }}
 {{- end }}
 {{- end }}
 {{- end }}

charts/kyverno/values.yaml

@@ -847,6 +847,11 @@ backgroundController:
       #     - ''
       #   resources:
       #     - pods
+      #   verbs:
+      #     - create
+      #     - update
+      #     - delete
+      #     - patch
 
   image:
     # -- Image registry

scripts/config/standard/kyverno.yaml

@@ -20,6 +20,13 @@ backgroundController:
             - nodes
             - nodes/status
             - pods
+          verbs:
+            - create
+            - update
+            - patch
+            - delete
+            - get
+            - list
 
 cleanupController:
   rbac: