Chip Zoller
Chip Zoller
Why such an old version?
I think it's Helm chart version 3.1.4
If you install the same version of the chart manually and not with Argo CD, does it work?
I don't know, it's something specific with OCP. Other Argo CD users do not report this problem. Are you maybe using a very old or very, very new version of...
You might ask in the #kyverno channel on Kubernetes Slack if others have noticed this. We don't have a way to test on OCP clusters ourselves.
At KubeCon so don't have that ability. I may have access to a cluster next week sometime but this is lower priority.
Similar to your post in #10122, I cannot reproduce this on the same versions I mentioned in my comment. The initContainer completes successfully and Kyverno 1.11.4 comes into a fully...
Closing issue for now until it can be reproduced.
Not 100% certain but I think this may also be the behavior if it's ClusterPolicy as well.
To use the `SelfSubjectAccessReview` API, a header would be needed, but the same result can be achieved with the `SubjectAccessReview` API in which case the user and/or group are specified...