Chip Zoller

Although multiple tests have been added, we need more. This isn't a blocker for 1.8.2 nor is really associated with any particular release so removing.

Just for commentary, the reason this isn't done today with auto-gen is this: Since labels can exist in two possible places in a Pod controller (`metadata.labels` and `spec.template.metadata.labels`), when a...

Do you have a suggestion on how we handle the problem of being opinionated and stranding the users who don't agree with our selected opinion?

Adding for reference that we did discover some undocumented code in the auto-gen logic which supports custom resources. It requires a little tweaking, but it's there and does work. See...

Nothing was done here.

> @chipzoller - do we need to update docs? I don't think so. This is a bug and not an enhancement.

Thanks very much, @somebadcode !

@JimBugwadia and @rurikudo: Where are we on this? We have this prioritized for 1.8.2. Is there any more work needed to get this in?

Closing this issue as it doesn't seem to impact logic in the webhook but only the CLI when a live cluster is not used. Will open a new issue, more...

Nothing has changed here AFAIK. Default resourceFilters still look like this: ```yaml resourceFilters: '[*,kyverno,*][Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][SelfSubjectAccessReview,*,*][Binding,*,*][ReplicaSet,*,*][AdmissionReport,*,*][ClusterAdmissionReport,*,*][BackgroundScanReport,*,*][ClusterBackgroundScanReport,*,*][ClusterRole,*,kyverno:*][ClusterRoleBinding,*,kyverno:*][ServiceAccount,kyverno,kyverno][ConfigMap,kyverno,kyverno][ConfigMap,kyverno,kyverno-metrics][Deployment,kyverno,kyverno][Job,kyverno,kyverno-hook-pre-delete][NetworkPolicy,kyverno,kyverno][PodDisruptionBudget,kyverno,kyverno][Role,kyverno,kyverno:*][RoleBinding,kyverno,kyverno:*][Secret,kyverno,kyverno-svc.kyverno.svc.*][Service,kyverno,kyverno-svc][Service,kyverno,kyverno-svc-metrics][ServiceMonitor,kyverno,kyverno-svc-service-monitor][Pod,kyverno,kyverno-test]' ```