What's new?
- Introduce a PolicyServer CRD that allow users to describe a Policy Server Deployment. The configuration of PolicyServer is now done through this resource, instead of using the
policy-server
ConfigMap. - ClusterAdmissionPolicy has the following changes:
- A new PolicyStatus field which can be:
unscheduled
,unschedulable
,pending
oractive
- A new condition called PolicyActive.
- A
policyServer
attribute. This is used to specify which instance of PolicyServer is going to host the policy. If nothing is specified, the policy will be scheduled on the PolicyServer nameddefault
. This one is created by the helm chart at installation time.
- A new PolicyStatus field which can be:
How to upgrade?
Unfortunately helm upgrade is not supported for this release. Uninstall previous kubewarden installation and delete the ClusterAdmissionPolicy CRD:
kubectl delete --all clusteradmissionpolicies.policies.kubewarden.io
helm uninstall --namespace kubewarden kubewarden-controller
kubectl delete namespace kubewarden
kubectl delete crd clusteradmissionpolicies.policies.kubewarden.io
Then install kubewarden's new version:
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.5.3/cert-manager.yaml
helm install --create-namespace -n kubewarden kubewarden-crds kubewarden/kubewarden-crds
helm install --wait -n kubewarden kubewarden-controller kubewarden/kubewarden-controller