shuting
shuting
Seems like there's no mutate policy installed. What about `validatingwebhookconfigurations/kyverno-resource-validating-webhook-cfg`? Obviously something is wrong while renewing the cert, but I wonder if you have tried deleting secret `kyverno-svc.kyverno.svc.kyverno-tls-ca`? The CA...
I'd define 3 separate rules and each mutates a single kind: ``` rules: - match: resources: kinds: - Deployment namespaces: - dqs-services - dqs-internal-services mutate: patchStrategicMerge: metadata: labels: backstage.io/kubernetes-id: '{{...
/cherry-pick release-1.12
/cherry-pick release-1.12
Inactive for 6 months, closing.
>There is no excludeBlock anymore What do you mean? We have `rules.match` and `rules.exclude`. >I ran codegen and it deleted pkg/client/clientset/versioned/fake/clientset_generated.go, should it have done it?? do I have to...
``` I1207 13:58:01.444749 1 log.go:146] webhooks/server "msg"="2022/12/07 13:58:01 http: TLS handshake error from 10.250.0.4:63015: EOF" ``` This should be an error log, not sure why it showed as info: https://github.com/kyverno/kyverno/blob/4d3a5deb23171cdbc0a0e3e1df439335e3a313ee/pkg/webhooks/server.go#L178
Verified with this [change](https://github.com/kyverno/kyverno/pull/6322) and the issue was fixed, sent https://github.com/kyverno/kyverno/pull/6336 to add the test.
This may be out-of-scope of a clone behavior. We will discuss behavior changes for the Generate rule type in the contributor meeting (1 March 2023), feel free to join us...
> We are not going to cover for this behavior. The change we will make in Kyverno 1.10 is to delete the downstream/generated resource is the clone source is deleted...