From 34af0e6f92f9a93d3f89866262d354a7bba8ad92 Mon Sep 17 00:00:00 2001 From: Vishal Choudhary Date: Mon, 28 Oct 2024 21:01:46 +0530 Subject: [PATCH 1/2] feat: add documentation for auto webhook deletion feature Signed-off-by: Vishal Choudhary --- content/en/docs/installation/uninstallation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/installation/uninstallation.md b/content/en/docs/installation/uninstallation.md index bf5449c6f..08812222e 100644 --- a/content/en/docs/installation/uninstallation.md +++ b/content/en/docs/installation/uninstallation.md @@ -26,7 +26,7 @@ helm uninstall kyverno kyverno/kyverno -n kyverno ### Clean up Webhooks -Kyverno by default will try to clean up all its webhooks when terminated. But in cases where its RBAC resources are removed first, it will lose the permission to do so properly. +Kyverno by default will try to clean up all its webhooks when terminated. But in cases where its RBAC resources are removed first, it will lose the permission to do so properly. Kyverno also supports deletion using finalizers to ensure resource deletion in right order. Use `--autoDeleteWebhooks` in admission-controller and cleanup-controller deployment to enable this feature. If manual webhook removal is necessary, use the below commands. From ec0f27c69122f6fae0c84b2d18c6f5404972ed15 Mon Sep 17 00:00:00 2001 From: Vishal Choudhary Date: Mon, 28 Oct 2024 21:32:55 +0530 Subject: [PATCH 2/2] fix: clarifications Signed-off-by: Vishal Choudhary --- content/en/docs/installation/uninstallation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/installation/uninstallation.md b/content/en/docs/installation/uninstallation.md index 08812222e..b7534727d 100644 --- a/content/en/docs/installation/uninstallation.md +++ b/content/en/docs/installation/uninstallation.md @@ -26,7 +26,7 @@ helm uninstall kyverno kyverno/kyverno -n kyverno ### Clean up Webhooks -Kyverno by default will try to clean up all its webhooks when terminated. But in cases where its RBAC resources are removed first, it will lose the permission to do so properly. Kyverno also supports deletion using finalizers to ensure resource deletion in right order. Use `--autoDeleteWebhooks` in admission-controller and cleanup-controller deployment to enable this feature. +Kyverno by default will try to clean up all its webhooks when terminated for helm based installations. But in other cases where Kyverno's RBAC resources are removed first, it will lose the permission to do so properly. Kyverno supports deletion using finalizers to ensure resource deletion in right order. Use `--autoDeleteWebhooks` in admission-controller and cleanup-controller deployment to enable this feature, this feature will be enabled by default in future releases. If manual webhook removal is necessary, use the below commands.