From 99d20dda308b7b1b081b284982dc056feee0aca6 Mon Sep 17 00:00:00 2001
From: Alozie Obuh <obuh.alozie@solute.us>
Date: Tue, 24 Sep 2024 18:14:19 +0000
Subject: [PATCH] Add wait job exceptions
---
chart/templates/kyverno-policies/values.yaml | 2 ++
chart/templates/minio/values.yaml | 2 +-
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/chart/templates/kyverno-policies/values.yaml b/chart/templates/kyverno-policies/values.yaml
index e4d49cc393..6c0ffc833b 100644
--- a/chart/templates/kyverno-policies/values.yaml
+++ b/chart/templates/kyverno-policies/values.yaml
@@ -855,6 +855,7 @@ policies:
# tenant pods require get/list/watch on secrets/tenants (CRD), and create/delete/get on services
# More details in role named minio-minio-minio-instance-role
- minio-minio-minio-instance-*
+ - minio-instance-wait-job-*
- namespace: kyverno
pods:
allow:
@@ -983,6 +984,7 @@ policies:
allow:
- default-minio-bucket-creation-*
- mattermost-minio-*
+ - mattermost-wait-job-*
- namespace: mattermost-operator
pods:
allow:
diff --git a/chart/templates/minio/values.yaml b/chart/templates/minio/values.yaml
index 17764fd83e..4374156ea1 100644
--- a/chart/templates/minio/values.yaml
+++ b/chart/templates/minio/values.yaml
@@ -44,7 +44,7 @@ podAnnotations:
traffic.sidecar.istio.io/includeInboundPorts: "*"
traffic.sidecar.istio.io/excludeInboundPorts: "9443"
-secrets:
+configSecret:
accessKey: {{ .Values.addons.minio.accesskey | default "minio" }}
secretKey: {{ .Values.addons.minio.secretkey | default "minio123" }}
--
GitLab