infra/stacks/kyverno/modules/kyverno
Viktor Barzin 12bdd06f74
All checks were successful
ci/woodpecker/push/default Pipeline was successful
ci/woodpecker/push/build-cli Pipeline was successful
kyverno: force_new on sync-ghcr-credentials — generate rules are immutable
Pipeline 138: the validate-policy webhook denies in-place edits of a
generate rule (allowlist additions). force_new = delete+recreate;
generated secrets survive and generateExisting re-adopts.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-12 23:18:15 +00:00
..
dependency-init-containers.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
ghcr-credentials.tf kyverno: force_new on sync-ghcr-credentials — generate rules are immutable 2026-06-12 23:18:15 +00:00
keel-annotations.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
main.tf etcd-load-reduction: remove VPA/Goldilocks, disable kyverno reporting, descheduler hourly 2026-06-12 19:41:22 +00:00
registry-credentials.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
resource-governance.tf tts+kyverno: non-merge apply trigger (merge-commit diff hid stacks/tts from the stack detector) 2026-06-11 19:08:23 +00:00
security-policies.tf android-emulator: new stack — shared in-cluster Android 16 testing instance 2026-06-11 19:51:57 +00:00
tls-secret-sync.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
versions.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00