feat: allow pod labels for cleanup jobs (kyverno#7808) (kyverno#7809)

Signed-off-by: bakito <[email protected]> Co-authored-by: Marc Brugger <[email protected]>
nirmata · Jul 11, 2023 · bbd0cb0 · bbd0cb0
1 parent fdc962e
commit bbd0cb0
Show file tree

Hide file tree

Showing 5 changed files with 18 additions and 0 deletions.
diff --git a/charts/kyverno/Chart.yaml b/charts/kyverno/Chart.yaml
@@ -32,3 +32,5 @@ annotations:
       description: define resources for cleanupJobs
     - kind: changed
       description: change to enable webhook cleanup hook by default
+    - kind: added
+      description: allow pod labels for cleanup jobs
diff --git a/charts/kyverno/README.md b/charts/kyverno/README.md
@@ -646,6 +646,7 @@ The chart values are organised per component.
 | cleanupJobs.admissionReports.resources | object | `{}` | Job resources |
 | cleanupJobs.admissionReports.tolerations | list | `[]` | List of node taints to tolerate |
 | cleanupJobs.admissionReports.podAnnotations | object | `{}` | Pod Annotations |
+| cleanupJobs.admissionReports.podLabels | object | `{}` | Pod labels |
 | cleanupJobs.clusterAdmissionReports.enabled | bool | `true` | Enable cleanup cronjob |
 | cleanupJobs.clusterAdmissionReports.image.registry | string | `nil` | Image registry |
 | cleanupJobs.clusterAdmissionReports.image.repository | string | `"bitnami/kubectl"` | Image repository |
@@ -660,6 +661,7 @@ The chart values are organised per component.
 | cleanupJobs.clusterAdmissionReports.resources | object | `{}` | Job resources |
 | cleanupJobs.clusterAdmissionReports.tolerations | list | `[]` | List of node taints to tolerate |
 | cleanupJobs.clusterAdmissionReports.podAnnotations | object | `{}` | Pod Annotations |
+| cleanupJobs.clusterAdmissionReports.podLabels | object | `{}` | Pod Labels |
 
 ### Other
 

diff --git a/charts/kyverno/templates/cleanup/cleanup-admission-reports.yaml b/charts/kyverno/templates/cleanup/cleanup-admission-reports.yaml
@@ -19,6 +19,10 @@ spec:
           annotations:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+          {{- with .Values.cleanupJobs.admissionReports.podLabels }}
+          labels:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
         spec:
           serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
           {{- with .Values.cleanupJobs.admissionReports.podSecurityContext }}

diff --git a/charts/kyverno/templates/cleanup/cleanup-cluster-admission-reports.yaml b/charts/kyverno/templates/cleanup/cleanup-cluster-admission-reports.yaml
@@ -19,6 +19,10 @@ spec:
           annotations:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+          {{- with .Values.cleanupJobs.clusterAdmissionReports.podLabels }}
+          labels:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
         spec:
           serviceAccountName: {{ template "kyverno.name" . }}-cleanup-jobs
           {{- with .Values.cleanupJobs.clusterAdmissionReports.podSecurityContext }}

diff --git a/charts/kyverno/values.yaml b/charts/kyverno/values.yaml
@@ -448,6 +448,9 @@ cleanupJobs:
     # -- Pod Annotations
     podAnnotations: {}
 
+    # -- Pod labels
+    podLabels: {}
+
   clusterAdmissionReports:
 
     # -- Enable cleanup cronjob
@@ -504,6 +507,9 @@ cleanupJobs:
     # -- Pod Annotations
     podAnnotations: {}
 
+    # -- Pod Labels
+    podLabels: {}
+
 # Admission controller configuration
 admissionController: