Resolve "Kyverno Policies blocks elasticsearch autoRollingUpgrade Job"
- Sep 26, 2024
-
-
Zach Callahan authored
-
Zach Callahan authored
-
UNCLASSIFIED - NO CUI
Currently supported Big Bang Version is 2.49
Attention Iron Bank Customers: On March 27, 2025, we are moving SBOM artifacts from the Anchore Scan job to the Build job to streamline the container hardening pipeline. If you currently download SBOMs from the Anchore Scan job, you can still get them from the Build job and from other sources, including IBFE and image attestations.
This MR resolves Kyverno compliance issues with the upgrade Job
that was
deployed whenever autoRollingUpgrade.enabled
was set to true
.
The upgrade Job
itself is still having issues unrelated to the Kyverno
policies that will be addressed in another MR.
To reproduce the test scenario:
elasticsearchKibana:
enabled: true
values:
autoRollingUpgrade:
enabled: true
elasticsearchKibana:
enabled: true
git:
branch: 209-upgrade-job-kyverno-compliance
tag: null
values:
autoRollingUpgrade:
enabled: true
❯ kubectl get job -n logging
NAME STATUS COMPLETIONS DURATION AGE
bb-logging-ek-upgrade Complete 1/1 57s 115s
N/A
Closes #209 (closed)
UNCLASSIFIED - NO CUI