fix(kyverno): breaking changes on minor update wow

Signed-off-by: Devin Buhl <[email protected]>
onedr0p · Oct 29, 2024 · d132672 · d132672
1 parent f1c457a
commit d132672
Show file tree

Hide file tree

Showing 2 changed files with 32 additions and 29 deletions.
diff --git a/kubernetes/main/apps/kyverno/kyverno/app/helmrelease.yaml b/kubernetes/main/apps/kyverno/kyverno/app/helmrelease.yaml
@@ -28,45 +28,49 @@ spec:
     grafana:
       enabled: true
     admissionController:
-      replicas: 3
-      rbac:
-        clusterRole:
-          extraResources:
-            - apiGroups:
-                - ""
-              resources:
-                - pods
-              verbs:
-                - create
-                - update
-                - delete
+      clusterRole:
+        extraResources:
+          - apiGroups:
+              - '*'
+            resources:
+              - '*'
+            verbs:
+              - get
+              - list
+              - watch
       serviceMonitor:
         enabled: true
     backgroundController:
-      rbac:
-        clusterRole:
-          extraResources:
-            - apiGroups:
-                - ""
-              resources:
-                - pods
-              verbs:
-                - create
-                - update
-                - patch
-                - delete
-                - get
-                - list
+      clusterRole:
+        extraResources:
+          - apiGroups:
+              - '*'
+            resources:
+              - '*'
+            verbs:
+              - get
+              - list
+              - watch
       resources:
         requests:
           cpu: 100m
         limits:
           memory: 1Gi
       serviceMonitor:
         enabled: true
-    cleanupController:
+    reportsController:
+      clusterRole:
+        extraResources:
+          - apiGroups:
+              - '*'
+            resources:
+              - '*'
+            verbs:
+              - get
+              - list
+              - watch
       serviceMonitor:
         enabled: true
-    reportsController:
+    cleanupController:
       serviceMonitor:
         enabled: true
diff --git a/kubernetes/main/apps/kyverno/kyverno/policies/volsync-movers.yaml b/kubernetes/main/apps/kyverno/kyverno/policies/volsync-movers.yaml
@@ -8,7 +8,6 @@ metadata:
     policies.kyverno.io/title: Mutate Volsync mover jobs
     policies.kyverno.io/subject: Pod
 spec:
-  generateExistingOnPolicyUpdate: true
   rules:
     - name: mutate-volsync-src-movers
       match: