Page MenuHomePhabricator

kyverno prevents deletion of pods that violates its policies
Closed, ResolvedPublicBUG REPORT

Description

This was first noticed during the just concluded upgrade of k8s to 1.27 ( the detailed description of this issue can be found here )

kyverno is acting against its interest by preventing the deletion of pods that violate its policies. We should configure kyverno to skip validation for delete operations

Details

Related Changes in GitLab:
TitleReferenceAuthorSource BranchDest Branch
maintain-kubeusers: bump to 0.0.169-20240924215037-64da2c2erepos/cloud/toolforge/toolforge-deploy!529ghostbump_maintain-kubeusersmain
[maintain-kubeusers.kyverno] only validate CREATE operationsrepos/cloud/toolforge/maintain-kubeusers!62raymond-ndibedont_validate_on_deletemain
Customize query in GitLab

Event Timeline

Raymond_Ndibe renamed this task from kyverno prevents deletion of pods that violates it's policies to kyverno prevents deletion of pods that violates its policies.Sep 19 2024, 7:52 AM
Raymond_Ndibe claimed this task.
Raymond_Ndibe updated the task description. (Show Details)
Raymond_Ndibe updated the task description. (Show Details)
dcaro triaged this task as High priority.Sep 19 2024, 5:44 PM
Raymond_Ndibe changed the task status from Open to In Progress.Sep 24 2024, 3:00 PM

project_1317_bot_df3177307bed93c3f34e421e26c86e38 opened https://gitlab.wikimedia.org/repos/cloud/toolforge/toolforge-deploy/-/merge_requests/529

maintain-kubeusers: bump to 0.0.169-20240924215037-64da2c2e

Mentioned in SAL (#wikimedia-cloud-feed) [2024-09-24T21:56:00Z] <wmbot~raymondndibe@wmf3402> START - Cookbook wmcs.toolforge.component.deploy for component maintain-kubeusers (T375157)

Mentioned in SAL (#wikimedia-cloud-feed) [2024-09-24T22:03:02Z] <wmbot~raymondndibe@wmf3402> END (PASS) - Cookbook wmcs.toolforge.component.deploy (exit_code=0) for component maintain-kubeusers (T375157)

Mentioned in SAL (#wikimedia-cloud-feed) [2024-09-24T22:03:47Z] <wmbot~raymondndibe@wmf3402> START - Cookbook wmcs.toolforge.component.deploy for component maintain-kubeusers (T375157)

Mentioned in SAL (#wikimedia-cloud-feed) [2024-09-24T22:11:22Z] <wmbot~raymondndibe@wmf3402> END (PASS) - Cookbook wmcs.toolforge.component.deploy (exit_code=0) for component maintain-kubeusers (T375157)