Migration Guide
Policy Reporter
Deprecations
Deprecated values are removed
- crdVersion: v1alpha1- cleanupDebounceTime: 20
Yandex push target
Changed into a general S3 Target.
target:- yandex:- accessKeyID: ""- secretAccessKey: ""- region: ""- endpoint: ""- bucket: ""- prefix: ""- minimumPriority: ""- skipExistingOnStartup: true+ s3:+ accessKeyID: ""+ secretAccessKey: ""+ region: "ru-central1"+ endpoint: "https://storage.yandexcloud.net"+ bucket: ""+ prefix: ""+ minimumPriority: ""+ sources: []+ skipExistingOnStartup: true
Metrics API
Metrics are now optional and disabled by default. They are enabled if you use the monitoring
subchart. Otherwise, you need to enable them separately.
Metrics are now using the same HTTP Server as the REST APIs (8080
instead of 2112
).
+ metrics:+ enabled: true
REST APIs
REST APIs are now optional and disabled by default. They are enabled if you use the ui
subchart. Otherwise, you need to enable them separately.
+ rest:+ enabled: true
Network Policy
Egress traffic is now configured as default egress rule instead of the networkPolicy.kubernetesApiPort
value.
networkPolicy: enabled: true- kubernetesApiPort: 6443- egress: []+ egress:+ - to:+ ports:+ - protocol: TCP+ port: 6443
Priority mapping
The watch feature was removed, so it is enabled by default. Its recommended to use the severity of your policy to define the priority.
- policyPriorities:- enabled: false- mapping: {}+ policyPriorities: {}
Kyverno Plugin
Network Policy
Egress traffic is now configured as default egress rule instead of the kyvernoPlugin.networkPolicy.kubernetesApiPort
value.
kyvernoPlugin: networkPolicy: enabled: true- kubernetesApiPort: 6443- egress: []+ egress:+ - to:+ ports:+ - protocol: TCP+ port: 6443
Monitoring
Namespace
Namespace configuration for the Grafana Dashboard ConfigMaps moved from monitoring.namespace
to monitoring.grafana.namespace
and has no default value as before.
monitoring:- namespace: cattle-dashboards+ grafana:+ namespace: cattle-dashboards