UNCLASSIFIED - NO CUI

Skip to content

Resolve "AuthZPolicy should not be deployed if Reporter-UI is disabled"

General MR

Summary

When Kyverno Reporter UI is disabled (upstream.ui.enabled=false), the corresponding AuthorizationPolicy is still deployed.

See here. I believe this line should change from

{{- if and .Values.istio.enabled .Values.istio.hardened.enabled -}}

to

{{- if and .Values.istio.enabled .Values.istio.hardened.enabled .Values.upstream.ui.enable

Note: You can disable the Kyverno Reporter UI using an override to set the upstream.ui.enabled=false now. Please note that the default value for the upstream.ui.enabled is set to true.

Relevant logs/screenshots

Before: image

After: image

Linked Issue

issue

Upgrade Notices

N/A

Closes #128 (closed)

Edited by Daniel Chen

Merge request reports

Loading