From fb9bd2ac7e31830d13c01c69b99245b8766e939c Mon Sep 17 00:00:00 2001 From: Mikkel Oscar Lyderik Larsen Date: Thu, 3 Apr 2025 13:27:06 +0200 Subject: [PATCH] Exclude base image validation in kube-system Signed-off-by: Mikkel Oscar Lyderik Larsen --- cluster/config-defaults.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/cluster/config-defaults.yaml b/cluster/config-defaults.yaml index 36450b8629..db97808cc1 100644 --- a/cluster/config-defaults.yaml +++ b/cluster/config-defaults.yaml @@ -606,6 +606,7 @@ kubelet_image_gc_low_threshold: 40 {{if eq .Cluster.Environment "production"}} teapot_admission_controller_validate_application_label: "true" teapot_admission_controller_validate_base_images: "true" +teapot_admission_controller_validate_base_images_namespaces: "^kube-system$" # Check container image compliance in production clusters. Be careful when thinking about changing this: Setting it to # false will allow any container image to run in production clusters.