mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 15:37:19 +00:00
Code Activity

feat: add omit-events feature in helm chart (#7185)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-05-12 17:11:20 +02:00 • committed by GitHub
parent 83840a2462
commit b3a56176e5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
7 changed files with 19 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
charts/kyverno/README.md
View file

@ -295,6 +295,7 @@ The chart values are organised per component.
| features.forceFailurePolicyIgnore.enabled | bool | `false` | Enables the feature | | features.forceFailurePolicyIgnore.enabled | bool | `false` | Enables the feature |
| features.logging.format | string | `"text"` | Logging format | | features.logging.format | string | `"text"` | Logging format |
| features.logging.verbosity | int | `2` | Logging verbosity | | features.logging.verbosity | int | `2` | Logging verbosity |
| features.omitEvents.eventTypes | list | `[]` | Events which should not be emitted (possible values `PolicyViolation`, `PolicyApplied`, `PolicyError`, and `PolicySkipped`) |
| features.policyExceptions.enabled | bool | `false` | Enables the feature | | features.policyExceptions.enabled | bool | `false` | Enables the feature |
| features.policyExceptions.namespace | string | `""` | Restrict policy exceptions to a single namespace | | features.policyExceptions.namespace | string | `""` | Restrict policy exceptions to a single namespace |
| features.protectManagedResources.enabled | bool | `false` | Enables the feature | | features.protectManagedResources.enabled | bool | `false` | Enables the feature |

9
charts/kyverno/templates/_helpers.tpl
View file

@ -35,9 +35,16 @@
{{- $flags = append $flags (print "--loggingFormat=" .format) -}} {{- $flags = append $flags (print "--loggingFormat=" .format) -}}
{{- $flags = append $flags (print "--v=" (join "," .verbosity)) -}} {{- $flags = append $flags (print "--v=" (join "," .verbosity)) -}}
{{- end -}} {{- end -}}
{{- with .omitEvents -}}
{{- with .eventTypes -}}
{{- $flags = append $flags (print "--omit-events=" (join "," .)) -}}
{{- end -}}
{{- end -}}
{{- with .policyExceptions -}} {{- with .policyExceptions -}}
{{- $flags = append $flags (print "--enablePolicyException=" .enabled) -}} {{- $flags = append $flags (print "--enablePolicyException=" .enabled) -}}
{{- $flags = append $flags (print "--exceptionNamespace=" .namespace) -}} {{- with .namespace -}}
{{- $flags = append $flags (print "--exceptionNamespace=" .) -}}
{{- end -}}
{{- end -}} {{- end -}}
{{- with .protectManagedResources -}} {{- with .protectManagedResources -}}
{{- $flags = append $flags (print "--protectManagedResources=" .enabled) -}} {{- $flags = append $flags (print "--protectManagedResources=" .enabled) -}}

1
charts/kyverno/templates/admission-controller/deployment.yaml
View file

@ -152,6 +152,7 @@ spec:
"dumpPayload" "dumpPayload"
"forceFailurePolicyIgnore" "forceFailurePolicyIgnore"
"logging" "logging"
"omitEvents"
"policyExceptions" "policyExceptions"
"protectManagedResources" "protectManagedResources"
"registryClient" "registryClient"

1
charts/kyverno/templates/background-controller/deployment.yaml
View file

@ -104,6 +104,7 @@ spec:
{{- include "kyverno.features.flags" (pick (mergeOverwrite .Values.features .Values.backgroundController.featuresOverride) {{- include "kyverno.features.flags" (pick (mergeOverwrite .Values.features .Values.backgroundController.featuresOverride)
"configMapCaching" "configMapCaching"
"logging" "logging"
"omitEvents"
"policyExceptions" "policyExceptions"
) | nindent 12 }} ) | nindent 12 }}
{{- range $key, $value := .Values.backgroundController.extraArgs }} {{- range $key, $value := .Values.backgroundController.extraArgs }}

1
charts/kyverno/templates/reports-controller/deployment.yaml
View file

@ -106,6 +106,7 @@ spec:
"backgroundScan" "backgroundScan"
"configMapCaching" "configMapCaching"
"logging" "logging"
"omitEvents"
"policyExceptions" "policyExceptions"
"reports" "reports"
"registryClient" "registryClient"

7
charts/kyverno/values.yaml
View file

@ -354,6 +354,13 @@ features:
format: text format: text
# -- Logging verbosity # -- Logging verbosity
verbosity: 2 verbosity: 2
omitEvents:
# -- Events which should not be emitted (possible values `PolicyViolation`, `PolicyApplied`, `PolicyError`, and `PolicySkipped`)
eventTypes: []
# - PolicyViolation
# - PolicyApplied
# - PolicyError
# - PolicySkipped
policyExceptions: policyExceptions:
# -- Enables the feature # -- Enables the feature
enabled: false enabled: false

3
config/install-latest-testing.yaml
View file

@ -35297,7 +35297,6 @@ spec:
- --loggingFormat=text - --loggingFormat=text
- --v=2 - --v=2
- --enablePolicyException=false - --enablePolicyException=false
- --exceptionNamespace=
- --protectManagedResources=false - --protectManagedResources=false
- --allowInsecureRegistry=false - --allowInsecureRegistry=false
- --registryCredentialHelpers=default,google,amazon,azure,github - --registryCredentialHelpers=default,google,amazon,azure,github
@ -35442,7 +35441,6 @@ spec:
- --loggingFormat=text - --loggingFormat=text
- --v=2 - --v=2
- --enablePolicyException=false - --enablePolicyException=false
- --exceptionNamespace=
env: env:
- name: METRICS_CONFIG - name: METRICS_CONFIG
value: kyverno-metrics value: kyverno-metrics
@ -35660,7 +35658,6 @@ spec:
- --loggingFormat=text - --loggingFormat=text
- --v=2 - --v=2
- --enablePolicyException=false - --enablePolicyException=false
- --exceptionNamespace=
- --reportsChunkSize=1000 - --reportsChunkSize=1000
- --allowInsecureRegistry=false - --allowInsecureRegistry=false
- --registryCredentialHelpers=default,google,amazon,azure,github - --registryCredentialHelpers=default,google,amazon,azure,github