fix: simplify kyverno rules using operations:

2024-06-18 15:45:39 +02:00
parent 63dabec1b9
commit a7382d8cdf
4 changed files with 46 additions and 32 deletions
@@ -23,14 +23,16 @@ spec:
         - Secret
         names:
         - prod-rabbitmq
-    exclude:
-     any:
-     - resources:
-         kinds:
-         - Secret
-         selector:
-           matchLabels:
-             generate.kyverno.io/clone-source: ""
+         operations:
+         - CREATE
+    # exclude:
+    #  any:
+    #  - resources:
+    #      kinds:
+    #      - Secret
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
  - name: sync-staging-rabbitmq-secret
    generate:
      apiVersion: v1
@@ -48,14 +50,16 @@ spec:
         - Secret
         names:
         - staging-rabbitmq
-    exclude:
-     any:
-     - resources:
-         kinds:
-         - Secret
-         selector:
-           matchLabels:
-             generate.kyverno.io/clone-source: ""
+         operations:
+         - CREATE
+    # exclude:
+    #  any:
+    #  - resources:
+    #      kinds:
+    #      - Secret
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
  - name: add-rabbitmq-connstring
    mutate:
      patchStrategicMerge:
@@ -69,6 +73,8 @@ spec:
           names:
           - prod-rabbitmq
           - staging-rabbitmq
+           operations:
+           - UPDATE
    exclude:
     any:
       - resources: