search

IBM / portieris

A Kubernetes Admission Controller for verifying image trust.
Apache License 2.0
332 stars 78 forks source link

The default ClusterImagePolicy cannot be altered via helm upgrade commend #392

Open dbahatSAP opened 2 years ago

dbahatSAP commented 2 years ago

Hi,

Is there any specific reason why the default ClusterImagePolicy created by the helm chart got labeled with a "post-install" hook? (https://github.com/IBM/portieris/blob/main/helm/portieris/templates/policies.yaml#L74). It's not intuitive that a value like this only get's applied during the initial helm install, and not during upgrades.

jusschwa-ibm commented 2 years ago

Ditto for the image policies as well