PolicyException: Helm deploy order

iits-consulting / charts

Common helm charts we use

GNU General Public License v3.0

15 stars 7 forks source link

Open krankkkk opened 5 months ago

krankkkk commented 5 months ago

Sometimes the PolicyException get's deployed to k8s after the pod has already been modified by kyverno.

So we should probably get the PolicyExceptions deployed first.

Maybe via Helm-Hooks & Sync-Waves?

d-schl-iits commented 3 months ago

I see two potential problems with helm-hooks:

the PolicyExceptions get recreated in the cluster on each sync
if you only change the PolicyExceptions they do not get updated, because no sync is triggered and thus no hook is triggered