Chip Zoller
Chip Zoller
Moved to draft state.
After looking into this, the issue seems to be UpdateRequest magnification. Why it's happening isn't clear. If you isolate the policy to include just a single rule, only a single...
@eddycharly, is this your code?
Issue also occurs when scanning a PS1 directory which is a mapped drive. Is this project dead?
I see the same thing on 1.11.4. "Pass" events are created even though the ConfigMap defines `generateSuccessEvents: "false"`. 1. Create this ClusterPolicy ```yaml apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: require-labels...
So you're saying, with this PR, wildcards would no longer be supported in PEs?
Ok. I don't see it as unreasonable, but it will impact the user experience especially when it comes to autogen rules. Kyverno prepends "autogen-" to every rule applicable to autogen...
Sorry, should have clarified. "autogen-" is only prepended to the rule name if the rule is first applicable/accepted for autogen. See [docs](https://kyverno.io/docs/writing-policies/autogen/) if unclear.
That would only solve the autogen use case but there could be others. Not sure an auto-expansion is the right approach. Would be curious to get others' opinions here.
I think there is a good point here regardless: Why does Kyverno need to perform this check so frequently?