Danny Kulchinsky

Hey @squeed, @borkmann 👋🏼 Just curious if you folks think this is something worth addressing or should I let the issue get closed as "won't do"

Hey @chipzoller, @JimBugwadia 👋🏼 Thank you for your quick replies, will do my best to provide all the details. > Can you provide us with your CRD to make testing/reproduction...

folks, did a few more tests with different combinations: 1. `synchronize: false`, `generateExisting: true`, without `operations: ['CREATE', 'UPDATE']`: 🟢 No UR loops 🟢 Generate on admission works as expected 🟢...

That's interesting @realshuting! assuming the order is expected alphabetically, maybe I can try and sort it to match. UPDATE: I tried sorting the list in my manifest, but didn't help....

Hey @realshuting 👋🏼 Wanted to check if you had a chance to take a look at this issue? 🙏🏼

@realshuting, I have an additional policy that has the same issue and this would like be easier to test (doesn't depend on a CRD) as in the previous case, setting...

@realshuting dropping another policy that has the same behaviour and also include a list key in the generate data (`wi-gcp-sa-policy` rule). ```yaml apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: generate-workload-identity-sa-policy spec:...

Hey @jlcrow 👋🏼 This seems similar, but not exactly the same symptoms as I'm seeing. 1. The URs that get created don't get stuck in Pending, they all Complete. it's...

Hey @realshuting 👋 just wanted to check if this is something still on your radar? we are significantly impacted by this issue across multiple policies, would really appreciate a fix...

thank you @realshuting, hope you'll have a chance to include this in 1.12.2 🙏🏼