1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-10 09:56:55 +00:00
kyverno/scripts/config/standard/kyverno.yaml
Raúl Garcia Sanchez 9b0343d836
Allow setting verbs for clusterrole extraresources on backgroundController (#7380)
* fix webhookCleanup enable switch syntax

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* chore: cleanup codecov workflow (#5829)

* chore: cleanup codecov workflow

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: cleanup codecov workflow

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* updated template file to match with syntax fix

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* align definition of clusterRole extraResources for
backgroundController with adminissionController

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* update test routine clusterRole definition

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>

* Update scripts/config/standard/kyverno.yaml

fine for me

Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>

* Update charts/kyverno/values.yaml

fine for me 👍

Co-authored-by: shuting <shutting06@gmail.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>

---------

Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
2023-06-02 09:47:38 +00:00

38 lines
730 B
YAML

features:
policyExceptions:
enabled: true
backgroundController:
rbac:
clusterRole:
extraResources:
- apiGroups:
- '*'
resources:
- configmaps
- networkpolicies
- resourcequotas
- secrets
- roles
- rolebindings
- limitranges
- namespaces
- nodes
- nodes/status
- pods
verbs:
- create
- update
- patch
- delete
- get
- list
cleanupController:
rbac:
clusterRole:
extraResources:
- apiGroups:
- ''
resources:
- pods