Check-policy-report failed on keycloak pod disruption budget

mgmt-policy-report (#11299930149) · Jobs · Sylva-projects / sylva-core · GitLab

Checking Kyverno policyreports
00:01
$ error=0 # collapsed multi-line command
policyreport 69b15f15-037f-4ce5-8d47-ee36bcffd6a8 in keycloak namespace was in FAIL/WARN/ERROR
scope:
  apiVersion: policy/v1
  kind: PodDisruptionBudget
  name: keycloak-postgresql
  namespace: keycloak
  uid: 69b15f15-037f-4ce5-8d47-ee36bcffd6a8
results:
  - category: Other
    message: The matching PodDisruptionBudget for this resource has its unhealthyPodEvictionPolicy value different from 'AlwaysAllow' which is not permitted.
    policy: pdb-unhealthy-pod-eviction-check
    properties:
      process: background scan
    result: fail
    rule: pdb-unhealthypodeviction
    scored: true
    source: kyverno
    timestamp:
      nanos: 0
      seconds: 1757470277
policyreport 7c652658-6da9-4ead-b46d-c6518e52a570 in keycloak namespace was in FAIL/WARN/ERROR
scope:
  apiVersion: policy/v1
  kind: PodDisruptionBudget
  name: keycloak-postgresql-primary
  namespace: keycloak
  uid: 7c652658-6da9-4ead-b46d-c6518e52a570
results:
  - category: Other
    message: The matching PodDisruptionBudget for this resource has its unhealthyPodEvictionPolicy value different from 'AlwaysAllow' which is not permitted.
    policy: pdb-unhealthy-pod-eviction-check
    properties:
      process: background scan
    result: fail
    rule: pdb-unhealthypodeviction
    scored: true
    source: kyverno
    timestamp:
      nanos: 0
      seconds: 1757470277