feat(helm)!: Update chart kyverno to 3.3.3

[chii-bot]

This PR contains the following updates:

Package	Update	Change
kyverno (source)	major	v2.5.2 -> 3.3.3

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.

[chii-bot]

MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ COPYPASTE	jscpd	yes		2	0.95s
✅ REPOSITORY	git_diff	yes		no	0.02s
✅ REPOSITORY	secretlint	yes		no	1.2s
✅ YAML	prettier	2		0	0.51s
✅ YAML	yamllint	2		0	0.14s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[chii-bot]

Path: cluster/apps/kyverno/helm-release.yaml
Version: v2.5.2 -> 3.3.3

@@ -1,834 +1 @@
----
-# Source: kyverno/templates/poddisruptionbudget.yaml
-apiVersion: policy/v1beta1
-kind: PodDisruptionBudget
-metadata:
- name: kyverno
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- namespace: default
-spec:
- minAvailable: 1
- selector:
- matchLabels:
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/instance: kyverno
- app: kyverno
----
-# Source: kyverno/templates/serviceaccount.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- name: kyverno
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- namespace: default
----
-# Source: kyverno/templates/configmap.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- name: kyverno
- namespace: default
-data:
- # resource types to be skipped by kyverno policy engine
- resourceFilters: "[*,default,*][Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][SelfSubjectAccessReview,*,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][ClusterRole,*,kyverno:*][ClusterRoleBinding,*,kyverno:*][ServiceAccount,default,kyverno][ConfigMap,default,kyverno][ConfigMap,default,kyverno-metrics][Deployment,default,kyverno][Job,default,kyverno-hook-pre-delete][NetworkPolicy,default,kyverno][PodDisruptionBudget,default,kyverno][Role,default,kyverno:*][RoleBinding,default,kyverno:*][Secret,default,kyverno-svc.default.svc.*][Service,default,kyverno-svc][Service,default,kyverno-svc-metrics][ServiceMonitor,default,kyverno-svc-service-monitor][Pod,default,kyverno-test]"
- webhooks: '[{"namespaceSelector": {"matchExpressions": [{"key":"kubernetes.io/metadata.name","operator":"NotIn","values":["default"]}]}}]'
----
-# Source: kyverno/templates/metricsconfigmap.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- name: kyverno-metrics
- namespace: default
-data:
- namespaces: "{\"exclude\":[],\"include\":[]}"
----
-# Source: kyverno/templates/aggregateroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:admin-policies
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- rbac.authorization.k8s.io/aggregate-to-admin: "true"
- app: kyverno
-rules:
- - apiGroups:
- - kyverno.io
- resources:
- - policies
- - clusterpolicies
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/aggregateroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- rbac.authorization.k8s.io/aggregate-to-admin: "true"
- app: kyverno
- name: kyverno:admin-policyreport
-rules:
- - apiGroups:
- - wgpolicyk8s.io
- resources:
- - policyreport
- - clusterpolicyreport
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/aggregateroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- rbac.authorization.k8s.io/aggregate-to-admin: "true"
- app: kyverno
- name: kyverno:admin-reportchangerequest
-rules:
- - apiGroups:
- - kyverno.io
- resources:
- - reportchangerequests
- - clusterreportchangerequests
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/aggregateroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- rbac.authorization.k8s.io/aggregate-to-admin: "true"
- app: kyverno
- name: kyverno:admin-generaterequest
-rules:
- - apiGroups:
- - kyverno.io
- resources:
- - generaterequests
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:userinfo
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - "rbac.authorization.k8s.io"
- resources:
- - roles
- - clusterroles
- - rolebindings
- - clusterrolebindings
- verbs:
- - watch
- - list
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:policies
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - kyverno.io
- resources:
- - policies
- - policies/status
- - clusterpolicies
- - clusterpolicies/status
- - generaterequests
- - generaterequests/status
- - updaterequests
- - updaterequests/status
- - reportchangerequests
- - reportchangerequests/status
- - clusterreportchangerequests
- - clusterreportchangerequests/status
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
- - deletecollection
- - apiGroups:
- - wgpolicyk8s.io
- resources:
- - policyreports
- - policyreports/status
- - clusterpolicyreports
- - clusterpolicyreports/status
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
- - deletecollection
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:view
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - '*'
- resources:
- - '*'
- verbs:
- - get
- - list
- - watch
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:generate
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - networking.k8s.io
- resources:
- - ingresses
- - ingressclasses
- - networkpolicies
- verbs:
- - create
- - update
- - patch
- - delete
- - apiGroups:
- - ""
- resources:
- - namespaces
- - configmaps
- - secrets
- - resourcequotas
- - limitranges
- verbs:
- - create
- - update
- - patch
- - delete
- - apiGroups:
- - rbac.authorization.k8s.io
- resources:
- - rolebindings
- - roles
- verbs:
- - create
- - update
- - patch
- - delete
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:events
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - "*"
- resources:
- - events
- verbs:
- - create
- - update
- - patch
- - delete
----
-# Source: kyverno/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: kyverno:webhook
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - 'admissionregistration.k8s.io'
- resources:
- - mutatingwebhookconfigurations
- - validatingwebhookconfigurations
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:userinfo
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:userinfo
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:policies
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:policies
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:view
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:view
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:generate
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:generate
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:events
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:events
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:webhook
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kyverno:webhook
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/role.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: kyverno:leaderelection
- namespace: default
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-rules:
- - apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - create
- - delete
- - get
- - patch
- - update
- # Allow update of Kyverno deployment annotations
- - apiGroups:
- - apps
- resources:
- - deployments
- verbs:
- - get
- - list
- - patch
- - update
- - watch
----
-# Source: kyverno/templates/rolebinding.yaml
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: kyverno:leaderelection
- namespace: default
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kyverno:leaderelection
-subjects:
- - kind: ServiceAccount
- name: kyverno
- namespace: default
----
-# Source: kyverno/templates/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: kyverno-svc
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- namespace: default
-spec:
- ports:
- - port: 443
- targetPort: https
- protocol: TCP
- name: https
- selector:
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/instance: kyverno
- app: kyverno
- type: ClusterIP
----
-# Source: kyverno/templates/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: kyverno-svc-metrics
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- namespace: default
-spec:
- ports:
- - port: 8000
- targetPort: 8000
- protocol: TCP
- name: metrics-port
- selector:
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/instance: kyverno
- app: kyverno
- type: ClusterIP
----
-# Source: kyverno/templates/deployment.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: kyverno
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- namespace: default
-spec:
- replicas: 3
- selector:
- matchLabels:
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/instance: kyverno
- strategy:
- rollingUpdate:
- maxSurge: 1
- maxUnavailable: 40%
- type: RollingUpdate
- template:
- metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- spec:
- affinity:
- podAntiAffinity:
- preferredDuringSchedulingIgnoredDuringExecution:
- - podAffinityTerm:
- labelSelector:
- matchExpressions:
- - key: app.kubernetes.io/name
- operator: In
- values:
- - kyverno
- topologyKey: kubernetes.io/hostname
- weight: 1
- topologySpreadConstraints:
- - labelSelector:
- matchLabels:
- app.kubernetes.io/instance: kyverno
- maxSkew: 1
- topologyKey: kubernetes.io/hostname
- whenUnsatisfiable: DoNotSchedule
- serviceAccountName: kyverno
- dnsPolicy: ClusterFirst
- initContainers:
- - name: kyverno-pre
- image: ghcr.io/kyverno/kyvernopre:v1.7.2
- imagePullPolicy: IfNotPresent
- resources:
- limits:
- cpu: 100m
- memory: 256Mi
- requests:
- cpu: 10m
- memory: 64Mi
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- privileged: false
- readOnlyRootFilesystem: true
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- env:
- - name: METRICS_CONFIG
- value: kyverno-metrics
- - name: KYVERNO_NAMESPACE
- valueFrom:
- fieldRef:
- fieldPath: metadata.namespace
- - name: KYVERNO_DEPLOYMENT
- value: kyverno
- containers:
- - name: kyverno
- image: ghcr.io/kyverno/kyverno:v1.7.2
- imagePullPolicy: IfNotPresent
- args:
- - --autogenInternals=false
- - --clientRateLimitQPS=30
- - --clientRateLimitBurst=60
- resources:
- limits:
- memory: 384Mi
- requests:
- cpu: 100m
- memory: 128Mi
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- privileged: false
- readOnlyRootFilesystem: true
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- ports:
- - containerPort: 9443
- name: https
- protocol: TCP
- - containerPort: 8000
- name: metrics-port
- protocol: TCP
- env:
- - name: INIT_CONFIG
- value: kyverno
- - name: METRICS_CONFIG
- value: kyverno-metrics
- - name: KYVERNO_NAMESPACE
- valueFrom:
- fieldRef:
- fieldPath: metadata.namespace
- - name: KYVERNO_POD_NAME
- valueFrom:
- fieldRef:
- fieldPath: metadata.name
- - name: KYVERNO_SVC
- value: kyverno-svc
- - name: TUF_ROOT
- value: /.sigstore
- - name: KYVERNO_DEPLOYMENT
- value: kyverno
- livenessProbe:
- failureThreshold: 2
- httpGet:
- path: /health/liveness
- port: 9443
- scheme: HTTPS
- initialDelaySeconds: 15
- periodSeconds: 30
- successThreshold: 1
- timeoutSeconds: 5
- readinessProbe:
- failureThreshold: 6
- httpGet:
- path: /health/readiness
- port: 9443
- scheme: HTTPS
- initialDelaySeconds: 5
- periodSeconds: 10
- successThreshold: 1
- timeoutSeconds: 5
- volumeMounts:
- - mountPath: /.sigstore
- name: sigstore
- volumes:
- - name: sigstore
- emptyDir: {}
----
-# Source: kyverno/templates/servicemonitor.yaml
-apiVersion: "monitoring.coreos.com/v1"
-kind: ServiceMonitor
-metadata:
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/part-of: kyverno
- app: kyverno
- name: kyverno-svc-service-monitor
- namespace: default
-spec:
- selector:
- matchLabels:
- app.kubernetes.io/name: kyverno
- app.kubernetes.io/instance: kyverno
- app: kyverno
- namespaceSelector:
- matchNames:
- - default
- endpoints:
- - port: metrics-port
- interval: 30s
- scrapeTimeout: 25s
----
-# Source: kyverno/templates/tests/test.yaml
-apiVersion: v1
-kind: Pod
-metadata:
- name: "kyverno-test"
- labels:
- app.kubernetes.io/component: kyverno
- app.kubernetes.io/instance: kyverno
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/name: kyverno-test
- app.kubernetes.io/part-of: kyverno
- annotations:
- "helm.sh/hook": test
-spec:
- restartPolicy: Never
- containers:
- - name: wget
- image: busybox
- imagePullPolicy: IfNotPresent
- command:
- - /bin/sh
- - -c
- - |
- sleep 20 ; wget -O- -S --no-check-certificate https://kyverno-svc:443/health/liveness
- - name: wget-metrics
- image: busybox
- imagePullPolicy: IfNotPresent
- command:
- - /bin/sh
- - -c
- - |
- sleep 20 ; wget -O- -S --no-check-certificate http://kyverno-svc-metrics:8000/metrics
+

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.