feat: add omit-events feature in helm chart (#7185)

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

charts/kyverno/README.md

@@ -295,6 +295,7 @@ The chart values are organised per component.
 | features.forceFailurePolicyIgnore.enabled | bool | `false` | Enables the feature |
 | features.logging.format | string | `"text"` | Logging format |
 | features.logging.verbosity | int | `2` | Logging verbosity |
+| features.omitEvents.eventTypes | list | `[]` | Events which should not be emitted (possible values `PolicyViolation`, `PolicyApplied`, `PolicyError`, and `PolicySkipped`) |
 | features.policyExceptions.enabled | bool | `false` | Enables the feature |
 | features.policyExceptions.namespace | string | `""` | Restrict policy exceptions to a single namespace |
 | features.protectManagedResources.enabled | bool | `false` | Enables the feature |

charts/kyverno/templates/_helpers.tpl

@@ -35,9 +35,16 @@
   {{- $flags = append $flags (print "--loggingFormat=" .format) -}}
   {{- $flags = append $flags (print "--v=" (join "," .verbosity)) -}}
 {{- end -}}
+{{- with .omitEvents -}}
+  {{- with .eventTypes -}}
+    {{- $flags = append $flags (print "--omit-events=" (join "," .)) -}}
+  {{- end -}}
+{{- end -}}
 {{- with .policyExceptions -}}
   {{- $flags = append $flags (print "--enablePolicyException=" .enabled) -}}
-  {{- $flags = append $flags (print "--exceptionNamespace=" .namespace) -}}
+  {{- with .namespace -}}
+    {{- $flags = append $flags (print "--exceptionNamespace=" .) -}}
+  {{- end -}}
 {{- end -}}
 {{- with .protectManagedResources -}}
   {{- $flags = append $flags (print "--protectManagedResources=" .enabled) -}}

charts/kyverno/templates/admission-controller/deployment.yaml

@@ -152,6 +152,7 @@ spec:
               "dumpPayload"
               "forceFailurePolicyIgnore"
               "logging"
+              "omitEvents"
               "policyExceptions"
               "protectManagedResources"
               "registryClient"

charts/kyverno/templates/background-controller/deployment.yaml

@@ -104,6 +104,7 @@ spec:
             {{- include "kyverno.features.flags" (pick (mergeOverwrite .Values.features .Values.backgroundController.featuresOverride)
               "configMapCaching"
               "logging"
+              "omitEvents"
               "policyExceptions"
             ) | nindent 12 }}
             {{- range $key, $value := .Values.backgroundController.extraArgs }}

charts/kyverno/templates/reports-controller/deployment.yaml

@@ -106,6 +106,7 @@ spec:
               "backgroundScan"
               "configMapCaching"
               "logging"
+              "omitEvents"
               "policyExceptions"
               "reports"
               "registryClient"

charts/kyverno/values.yaml

@@ -354,6 +354,13 @@ features:
     format: text
     # -- Logging verbosity
     verbosity: 2
+  omitEvents:
+    # -- Events which should not be emitted (possible values `PolicyViolation`, `PolicyApplied`, `PolicyError`, and `PolicySkipped`)
+    eventTypes: []
+      # - PolicyViolation
+      # - PolicyApplied
+      # - PolicyError
+      # - PolicySkipped
   policyExceptions:
     # -- Enables the feature
     enabled: false

config/install-latest-testing.yaml

@@ -35297,7 +35297,6 @@ spec:
             - --loggingFormat=text
             - --v=2
             - --enablePolicyException=false
-            - --exceptionNamespace=
             - --protectManagedResources=false
             - --allowInsecureRegistry=false
             - --registryCredentialHelpers=default,google,amazon,azure,github
@@ -35442,7 +35441,6 @@ spec:
             - --loggingFormat=text
             - --v=2
             - --enablePolicyException=false
-            - --exceptionNamespace=
           env:
           - name: METRICS_CONFIG
             value: kyverno-metrics
@@ -35660,7 +35658,6 @@ spec:
             - --loggingFormat=text
             - --v=2
             - --enablePolicyException=false
-            - --exceptionNamespace=
             - --reportsChunkSize=1000
             - --allowInsecureRegistry=false
             - --registryCredentialHelpers=default,google,amazon,azure,github