Skip to content

feat: Unified Kubewarden admission controller Helm chart#54

Open
jvanz wants to merge 1 commit intokubewarden:mainfrom
jvanz:0026
Open

feat: Unified Kubewarden admission controller Helm chart#54
jvanz wants to merge 1 commit intokubewarden:mainfrom
jvanz:0026

Conversation

@jvanz
Copy link
Copy Markdown
Member

@jvanz jvanz commented Apr 15, 2026

Description

Adds a proposal of how to merge all the Kubewarden admissions controller Helm charts (kubewarden-crds, kubewarden-controller and kubewarden-defaults) into a single Helm chart.

This document is a compilation of the discussions from the issue about this desired of unification of the Helm charts.

@jvanz jvanz self-assigned this Apr 15, 2026
Comment thread rfc/0026-unified-admission-controller-chart.md
Comment thread rfc/0026-unified-admission-controller-chart.md Outdated
Comment thread rfc/0026-unified-admission-controller-chart.md Outdated
Comment thread rfc/0026-unified-admission-controller-chart.md Outdated
Comment thread rfc/0026-unified-admission-controller-chart.md Outdated
@jvanz
Copy link
Copy Markdown
Member Author

jvanz commented Apr 16, 2026

We (@kubewarden/kubewarden-developers ) discussed this RFC in our daily call. There is a communication issue from what I understood from the issue that originates this document. From the issue, I understood that we would like to avoid controller changes. However, we all agree now that the best approach is to use the controller to handle the creation of the Kubewarden default resources. Therefore, I'll update the document to reflect that.

@jvanz
Copy link
Copy Markdown
Member Author

jvanz commented Apr 16, 2026

I'm moving this to the blocked column because I need to work in another issue that we would like to add in the controller for the next release. I'll come back to this after that.

@jvanz jvanz moved this from Pending review to Blocked in Kubewarden Admission Controller Apr 16, 2026
@flavio flavio moved this from Blocked to Todo in Kubewarden Admission Controller Apr 17, 2026
@jvanz jvanz moved this from Todo to In Progress in Kubewarden Admission Controller Apr 17, 2026
@jvanz jvanz moved this from In Progress to Todo in Kubewarden Admission Controller Apr 17, 2026
@jvanz jvanz moved this from Todo to In Progress in Kubewarden Admission Controller Apr 27, 2026
@jvanz jvanz requested a review from flavio April 28, 2026 13:50
@jvanz jvanz requested a review from viccuad April 28, 2026 13:50
@jvanz
Copy link
Copy Markdown
Member Author

jvanz commented Apr 28, 2026

@kubewarden/kubewarden-developers I think you can review once more.

@jvanz jvanz moved this from In Progress to Pending review in Kubewarden Admission Controller Apr 28, 2026
@jvanz jvanz moved this from Pending review to In Progress in Kubewarden Admission Controller Apr 28, 2026
Adds a proposal of how to merge all the Kubewarden admissions controller
Helm charts (kubewarden-crds, kubewarden-controller and
kubewarden-defaults) into a single Helm chart.

This document is a compilation of the discussions from the issue about
this desired of unification of the Helm charts.

Assisted-by: Github copilot
Signed-off-by: José Guilherme Vanz <jguilhermevanz@suse.com>
@jvanz jvanz moved this from In Progress to Pending review in Kubewarden Admission Controller Apr 28, 2026
Copy link
Copy Markdown
Member

@flavio flavio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the design. I think, unrelated with this RFC, I'll create an issue to change how we currently handle the deletion of a Policy Server.

I think we should not delete all the policies that are scheduled on it. We should leave them pending.

Given this RFC is probably going to be managed as part of the 1.37 release (we just released 1.35), I think it would be nice to have this change land as part of 1.36.

Update: I've created kubewarden/adm-controller#1700

Comment on lines +204 to +206
**Helm templates do the rendering.** All values (`{{ .Values.* }}`) are
resolved at Helm template time. The controller receives fully-formed YAML and
does not need to understand Helm values or custom configuration schemas.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was initially skeptical about this approach, but I think it's a good compromise. I like it, since it keeps the boilerplate to the minimum inside of the Go codebase.

Comment thread rfc/0026-unified-admission-controller-chart.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Pending review

Development

Successfully merging this pull request may close these issues.

3 participants