fix: add kyverno ignoreDifferences for webhook caBundles and SkipDryRunOnMissingResource

2026-04-29 15:25:24 +02:00
parent 312245ad87
commit be51b842ff
1 changed files with 15 additions and 0 deletions
@@ -14,7 +14,22 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: kyverno
+  ignoreDifferences:
+  - group: admissionregistration.k8s.io
+    kind: MutatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[].clientConfig.caBundle
+  - group: admissionregistration.k8s.io
+    kind: ValidatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[].clientConfig.caBundle
+  - group: apiextensions.k8s.io
+    kind: CustomResourceDefinition
+    jqPathExpressions:
+    - .spec.conversion.webhook.clientConfig.caBundle
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    - ServerSideApply=true
+    - SkipDryRunOnMissingResource=true
+    - RespectIgnoreDifferences=true