Kyverno
Medium
Installation
The Kyverno 1.20 Helm chart refuses to upgrade because legacy kyverno.io policies exist. Which value lets the upgrade proceed?
Select your answer:
Show answer and explanation
Answer: upgrade.acknowledgeLegacyPoliciesNotEnforced=true
Explanation
upgrade.acknowledgeLegacyPoliciesNotEnforced=true disables both the render-time lookup check and the pre-upgrade hook Job. It does not keep the legacy policies running. upgrade.legacyPolicyCheck.enabled=false only disables the hook Job, so the render-time check still blocks, and a stale upgrade.allowLegacyPolicies: true from an older values file makes the render fail.
More medium Kyverno questions
- What happens when a resource violates a Kyverno validation policy with 'validationFailureAction' set to 'enforce'?
- What is the purpose of a generation rule in Kyverno?
- Which of the following is NOT a valid resource selection method in Kyverno policies?
- What is the purpose of the 'background' field in a Kyverno policy?
- What is the purpose of the 'validationFailureAction' field in a Kyverno policy?
- Which of the following is a valid JMESPath expression in a Kyverno policy?