8000 [Bug] add-ambient-mode-namespace shouldn't apply to kube-system nor istio-system namespace · Issue #1280 · kyverno/policies · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
[Bug] add-ambient-mode-namespace shouldn't apply to kube-system nor istio-system namespace #1280
Open
@ceastman-r7

Description

@ceastman-r7

Kyverno Version

1.12

Kubernetes Version

1.29

Kubernetes Platform

EKS

Description

This policy https://kyverno.io/policies/istio/add-ambient-mode-namespace/add-ambient-mode-namespace/ adds the label to the kube-system and the istio-system namespace.

The attached policy would be a better one as it excludes the kube-system and istio-system namespace from the Istio Ambient data plane.

ambient-namespaces.yaml.gz

Steps to reproduce

  1. Apply this policy: https://kyverno.io/policies/istio/add-ambient-mode-namespace/add-ambient-mode-namespace/

Expected behavior

To not apply to the kube-system nor the istio-system namespace

Screenshots

No response

Kyverno logs

Slack discussion

No response

Troubleshooting

  • I have read and followed the documentation AND the troubleshooting guide.
  • I have searched other issues in this repository and mine is not recorded.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workinggood first issueGood for newcomers

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0