From d2c505738f2f9c5e795732e2df37c8b033909dea Mon Sep 17 00:00:00 2001 From: rjshrjndrn Date: Thu, 26 Jan 2023 17:24:38 +0100 Subject: [PATCH] chore(helm): Kyverno permissive mode Ref: https://github.com/kyverno/kyverno/issues/6123 Signed-off-by: rjshrjndrn --- scripts/helmcharts/toolings/templates/kyverno.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scripts/helmcharts/toolings/templates/kyverno.yaml b/scripts/helmcharts/toolings/templates/kyverno.yaml index 2f045abf0..c17ff8df8 100644 --- a/scripts/helmcharts/toolings/templates/kyverno.yaml +++ b/scripts/helmcharts/toolings/templates/kyverno.yaml @@ -7,10 +7,12 @@ metadata: "helm.sh/hook": post-install, post-upgrade "helm.sh/hook-weight": "4" # Higher precidence, so the first the config map will get created. spec: - validationFailureAction: enforce + # validationFailureAction: enforce + validationFailureAction: audit background: false webhookTimeoutSeconds: 30 - failurePolicy: Fail + # failurePolicy: Fail + failurePolicy: Ignore rules: - name: openreplay-image-signature match: