fix: fix dapr subscriptions namespace

2025-07-09 09:51:39 +02:00
parent d7334ea566
commit c2ddabd335
2 changed files with 32 additions and 0 deletions
@@ -41,6 +41,11 @@ spec:
    targetRevision: main
    ref: values
  project: sys
+  ignoreDifferences:
+    - kind: CustomResourceDefinition
+      name: subscriptions.dapr.io
+      jqPathExpressions:
+        - '.spec.conversion.webhook.clientConfig.service.namespace'
  syncPolicy:
    managedNamespaceMetadata:
      labels:
@@ -0,0 +1,27 @@
+{{- if .Values.clusterConfig.kyverno.enabled }}
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: fixup-dapr-crds
+spec:
+  background: false
+  generateExisting: false
+  mutateExistingOnPolicyUpdate: true
+  rules:
+    - name: fix-subscriptions-webhook-namespace
+      match:
+        any:
+        - resources:
+            kinds:
+            - CustomResourceDefinition
+            names:
+            - subscriptions.dapr.io
+      mutate:
+        patchStrategicMerge:
+          spec:
+            conversion:
+              webhook:
+                clientConfig:
+                  service:
+                    namespace: dapr-system
+{{- end }}