This task is to drop all traces of kyverno from Toolforge/Toolsbeta, etc.
- drop per-account policies via maintain-kubeusers
- un-deploy kyverno via helm
This task is to drop all traces of kyverno from Toolforge/Toolsbeta, etc.
Title | Reference | Author | Source Branch | Dest Branch | |
---|---|---|---|---|---|
resources: delete kyverno_pod_policy | repos/cloud/toolforge/maintain-kubeusers!44 | aborrero | arturo-799-resources-delete-ky | main |
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Open | aborrero | T362869 [k8s,infra] Upgrade Toolforge to Uwubernetes (1.30) | |||
Open | fnegri | T362868 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.29 | |||
Open | Raymond_Ndibe | T362867 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.28 | |||
Open | dcaro | T359641 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.27 | |||
Open | Slst2020 | T327025 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.26 | |||
Open | aborrero | T316107 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.25 | |||
In Progress | aborrero | T279110 [infra] Replace PodSecurityPolicy in Toolforge Kubernetes | |||
In Progress | aborrero | T364297 [k8s,infra] track PSP migration plan | |||
Declined | aborrero | T367950 Decision Request - Toolforge pod security via custom admission webhook | |||
Declined | aborrero | T367952 toolforge: drop kyverno |
aborrero opened https://gitlab.wikimedia.org/repos/cloud/toolforge/maintain-kubeusers/-/merge_requests/44
resources: delete kyverno_pod_policy
We just did the opposite of this, see T368044: Toolforge: redeploy kyverno after the outage
aborrero closed https://gitlab.wikimedia.org/repos/cloud/toolforge/maintain-kubeusers/-/merge_requests/44
resources: delete kyverno_pod_policy