UNCLASSIFIED - NO CUI

Skip to content

1749: Enable features.policyExceptions.enabled and restrict policyExceptions...

Chris Harden requested to merge 1749-automountServiceAccounts-enable-policyexceptions into main

General MR

Summary

This MR enables PolicyExceptions by default and restricts their creation to the kyverno namespace.

The upstream chart also enables PolicyExceptions by default in v1.11.0-beta.4, but we would like to pull the change in now so that we can use PolicyExceptions in the [P1BIGROCKS-2398] Disable automatic mounting of service account tokens epic.

Relevant logs/screenshots

(Include any relevant logs/screenshots)

Edited by Chris Harden

Merge request reports

UNCLASSIFIED - NO CUI