SKIP UPGRADE Testin things

General MR

Summary

Using upstream recommended template to exclude resources to exlude all istio-init containers from require-non-root-group ClusterPolicy

https://kyverno.io/docs/writing-policies/exceptions/

Also disabling wait-for-ready job as I tried several settings to tune the job but doesn't seem to provide much use anymore.

Relates #43 (closed) #51 (closed)

chart/templates/exception-require-non-root-group.yaml

+{{- $name := "require-non-root-group" }}
+{{- if and .Values.enabled (dig $name "enabled" false .Values.policies) }}
+apiVersion: kyverno.io/v1
+kind: PolicyException
+metadata:
+  name: {{ $name }}-exception
+namespace: {{ .Release.Namespace }}
+spec:
+  exceptions:
+  - policyName: {{ $name }}
+    ruleNames:
+    - run-as-group
+  match:
+    any:
+    - resources:
+        kinds:
+        - Pods/containers
+        names:
+        - istio-init
+{{- end }}