kubewarden / helm-charts

Helm charts for the Kubewarden project
Apache License 2.0
25 stars 17 forks source link

kubewarden-defaults: mutating policies should target only Pod #374

Closed flavio closed 9 months ago

flavio commented 9 months ago

Is there an existing issue for this?

Current Behavior

The kubewarden-defaults helm charts installs some policies that are doing mutation. These policies target all type of resources that have containers inside of them (Deployment, ReplicaSet, DaemonSet, Pod,...).

The mutating policies should instead target either the highest or the lowest resource otherwise they could introduce an endless reconciliation loop.

Expected Behavior

Steps To Reproduce

No response

Environment

No response

Anything else?

No response