SKIP UPGRADE Testin things

General MR

Summary

Using upstream recommended template to exclude resources to exlude all istio-init containers from require-non-root-group ClusterPolicy

https://kyverno.io/docs/writing-policies/exceptions/

Also disabling wait-for-ready job as I tried several settings to tune the job but doesn't seem to provide much use anymore.

Relates #43 (closed) #51 (closed)

chart/values.yaml

@@ -62,7 +62,7 @@ policyPreconditions: {}
 # -- Controls for the job that will wait for all policies to be ready.  This can be used with Helm's --wait-for-jobs to wait for all policies to be ready.
 waitforready:
   # -- Controls wait for ready deployment
-  enabled: true
+  enabled: false
   # -- Image to use in wait for ready job.  This must contain kubectl.
   image:
     repository: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl