UNCLASSIFIED - NO CUI

Skip to content

Namespaces not merging in Kyverno Policies

Bug

Description

Kyverno Policies Values have a function by which various lists can be merged, so that exclusions and other lists merge the defaults and overlays into one list.

As of now, the namespaces under the update-automountserviceaccounttokens policy are not being merged, and are instead overwriting the list. Please update this to use the same merging function as the other lists.

https://repo1.dso.mil/big-bang/bigbang/-/blob/master/chart/templates/kyverno-policies/values.yaml#L1092

Context

We are having to use a fullnameOverride for the monitoring-prometheus deployment as the previous one is now causing labels to appear that exceed the maximum number of characters.

We need to add the new names of pods to the namespaces list in the aforementioned policy, but are unable to at the moment.

BigBang Version

3.0