Migration Guide
Policy Reporter
Deprecations
Deprecated values are removed
- crdVersion: v1alpha1- cleanupDebounceTime: 20Yandex push target
Changed into a general S3 Target.
target:- yandex:- accessKeyID: ""- secretAccessKey: ""- region: ""- endpoint: ""- bucket: ""- prefix: ""- minimumPriority: ""- skipExistingOnStartup: true+ s3:+ accessKeyID: ""+ secretAccessKey: ""+ region: "ru-central1"+ endpoint: "https://storage.yandexcloud.net"+ bucket: ""+ prefix: ""+ minimumPriority: ""+ sources: []+ skipExistingOnStartup: trueMetrics API
Metrics are now optional and disabled by default. They are enabled if you use the monitoring subchart. Otherwise, you need to enable them separately.
Metrics are now using the same HTTP Server as the REST APIs (8080 instead of 2112).
+ metrics:+ enabled: trueREST APIs
REST APIs are now optional and disabled by default. They are enabled if you use the ui subchart. Otherwise, you need to enable them separately.
+ rest:+ enabled: trueNetwork Policy
Egress traffic is now configured as default egress rule instead of the networkPolicy.kubernetesApiPort value.
networkPolicy: enabled: true- kubernetesApiPort: 6443- egress: []+ egress:+ - to:+ ports:+ - protocol: TCP+ port: 6443Priority mapping
The watch feature was removed, so it is enabled by default. Its recommended to use the severity of your policy to define the priority.
- policyPriorities:- enabled: false- mapping: {}+ policyPriorities: {}Kyverno Plugin
Network Policy
Egress traffic is now configured as default egress rule instead of the kyvernoPlugin.networkPolicy.kubernetesApiPort value.
kyvernoPlugin: networkPolicy: enabled: true- kubernetesApiPort: 6443- egress: []+ egress:+ - to:+ ports:+ - protocol: TCP+ port: 6443Monitoring
Namespace
Namespace configuration for the Grafana Dashboard ConfigMaps moved from monitoring.namespace to monitoring.grafana.namespace and has no default value as before.
monitoring:- namespace: cattle-dashboards+ grafana:+ namespace: cattle-dashboards
