test scanner fixes

chart/templates/kyverno-policies/values.yaml

@@ -111,6 +111,7 @@ policies:
           names:
           - neuvector-enforcer-pod*
           - neuvector-controller-pod*
+          - neuvector-scanner-pod*
       {{- end }}
   {{- end }}
 
@@ -204,7 +205,9 @@ policies:
           - neuvector
           names:
           - neuvector-enforcer-pod*
+          - neuvector-cert-upgrader-job-*
           - neuvector-controller-pod*
+          - neuvector-scanner-pod*
           - neuvector-prometheus-exporter-pod*
       {{- end }}
       {{- if .Values.addons.holocron.enabled }}
@@ -354,6 +357,8 @@ policies:
           names:
           - neuvector-enforcer-pod-*
           - neuvector-controller-pod-*
+          - neuvector-scanner-pod-*
+          - neuvector-cert-upgrader-job-*
       {{- end }}
     {{- end }}
 
@@ -577,6 +582,7 @@ policies:
           - neuvector
           names:
           - neuvector-enforcer-pod*
+          - neuvector-cert-upgrader-job-*
           - neuvector-controller-pod*
       {{- end }}
       {{- if $deployNodeAgent }}
@@ -887,6 +893,7 @@ policies:
           allow:
           - neuvector-manager-pod-*
           - neuvector-scanner-pod-*
+          - neuvector-cert-upgrader-job-*
           - neuvector-controller-pod-*
           - neuvector-enforcer-pod-*
           - neuvector-updater-pod-*

chart/values.yaml

@@ -758,11 +758,15 @@ neuvector:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/neuvector.git
     path: "./chart"
-    tag: "2.7.8-bb.4"
+    #tag: "2.7.8-bb.4"
+    tag: ""
+    branch: "fix-scanner-permissions"
   helmRepo:
     repoName: "registry1"
     chartName: "neuvector"
-    tag: "2.7.8-bb.4"
+    #tag: "2.7.8-bb.4"
+    tag: ""
+    branch: "fix-scanner-permissions"
 
   # -- Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`).  The default is "public".
   ingress: