Skip to content

[Chart] Ability to exclude specific resources from baseline policies #2277

@z0rc

Description

@z0rc

Is your feature request related to a problem? Please describe.
I'm exploring how kyverno works with my configuration. So far I'm pretty satisfied with what I can get from baseline policies provided by chart. My problem is that there is some expected violations of those policies, for example fluent-bit needs hostPath to fetch containerd logs and node-exporter needs host namespaces to get host metrics.

At this moment I'm not ready to maintain my own set of policies. Maybe there is way to precisely exclude certain resources from chart's policies?

Describe the solution you'd like
Way to configure excludes for chart provided policies.

Describe alternatives you've considered
Patching chart with kustomize (via helmfile) seems possible, though I haven't explored this yet.

Additional context
None.

Metadata

Metadata

Assignees

Labels

end userThis label is used to track the issue that is raised by the end user.enhancementNew feature or requestgood first issueGood for newcomershelmIssues dealing with the Helm chart

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions