mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-15 20:20:22 +00:00
Code Activity

feat: make reports breaker threshold configurable (#10596)

Browse source 
* feat: make reports breaker threshold configurable

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* lower default threshold

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* release notes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2024-07-03 16:44:28 +02:00 • committed by GitHub
parent c51bf9716f
commit fed71ffaf6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/kyverno/Chart.yaml
View file

@ -35,6 +35,8 @@ annotations:
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: added - kind: added
description: Add a key to preserve configmap settings during upgrade description: Add a key to preserve configmap settings during upgrade
- kind: added
description: Make admission reports breaker threshold configurable
dependencies: dependencies:
- name: grafana - name: grafana
version: v0.0.0 version: v0.0.0

3
charts/kyverno/README.md
View file

@ -355,7 +355,8 @@ The chart values are organised per component.
| Key | Type | Default | Description | | Key | Type | Default | Description |
|-----|------|---------|-------------| |-----|------|---------|-------------|
| admissionController.featuresOverride | object | `{}` | Overrides features defined at the root level | | admissionController.featuresOverride | object | `{"admissionReports":{"backPressureThreshold":1000}}` | Overrides features defined at the root level |
| admissionController.featuresOverride.admissionReports.backPressureThreshold | int | `1000` | Max number of admission reports allowed in flight until the admission controller stops creating new ones |
| admissionController.rbac.create | bool | `true` | Create RBAC resources | | admissionController.rbac.create | bool | `true` | Create RBAC resources |
| admissionController.rbac.serviceAccount.name | string | `nil` | The ServiceAccount name | | admissionController.rbac.serviceAccount.name | string | `nil` | The ServiceAccount name |
| admissionController.rbac.serviceAccount.annotations | object | `{}` | Annotations for the ServiceAccount | | admissionController.rbac.serviceAccount.annotations | object | `{}` | Annotations for the ServiceAccount |

3
charts/kyverno/templates/_helpers.tpl
View file

@ -12,6 +12,9 @@
{{- $flags := list -}} {{- $flags := list -}}
{{- with .admissionReports -}} {{- with .admissionReports -}}
{{- $flags = append $flags (print "--admissionReports=" .enabled) -}} {{- $flags = append $flags (print "--admissionReports=" .enabled) -}}
{{- with .backPressureThreshold -}}
{{- $flags = append $flags (print "--maxAdmissionReports=" .) -}}
{{- end -}}
{{- end -}} {{- end -}}
{{- with .aggregateReports -}} {{- with .aggregateReports -}}
{{- $flags = append $flags (print "--aggregateReports=" .enabled) -}} {{- $flags = append $flags (print "--aggregateReports=" .enabled) -}}

5
charts/kyverno/values.yaml
View file

@ -931,7 +931,10 @@ cleanupJobs:
admissionController: admissionController:
# -- Overrides features defined at the root level # -- Overrides features defined at the root level
featuresOverride: {} featuresOverride:
admissionReports:
# -- Max number of admission reports allowed in flight until the admission controller stops creating new ones
backPressureThreshold: 1000
rbac: rbac:
# -- Create RBAC resources # -- Create RBAC resources

1
config/install-latest-testing.yaml
View file

@ -44876,6 +44876,7 @@ spec:
- --otelConfig=prometheus - --otelConfig=prometheus
- --metricsPort=8000 - --metricsPort=8000
- --admissionReports=true - --admissionReports=true
- --maxAdmissionReports=1000
- --autoUpdateWebhooks=true - --autoUpdateWebhooks=true
- --enableConfigMapCaching=true - --enableConfigMapCaching=true
- --enableDeferredLoading=true - --enableDeferredLoading=true