This task is to drop all traces of kyverno from Toolforge/Toolsbeta, etc.
- drop per-account policies via maintain-kubeusers
- un-deploy kyverno via helm
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Raymond_Ndibe | T359641 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.27 | |||
| Restricted Task | |||||
| Resolved | Slst2020 | T327025 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.26 | |||
| Resolved | • aborrero | T316107 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.25 | |||
| Resolved | • aborrero | T279110 [infra] Replace PodSecurityPolicy in Toolforge Kubernetes | |||
| Resolved | • aborrero | T364297 [k8s,infra] track PSP migration plan | |||
| Declined | • aborrero | T367950 Decision Request - Toolforge pod security via custom admission webhook | |||
| Declined | • aborrero | T367952 toolforge: drop kyverno |
Event Timeline
Comment Actions
aborrero opened https://gitlab.wikimedia.org/repos/cloud/toolforge/maintain-kubeusers/-/merge_requests/44
resources: delete kyverno_pod_policy
Comment Actions
We just did the opposite of this, see T368044: Toolforge: redeploy kyverno after the outage
Comment Actions
aborrero closed https://gitlab.wikimedia.org/repos/cloud/toolforge/maintain-kubeusers/-/merge_requests/44
resources: delete kyverno_pod_policy