avoid huge Kyverno load due to calico PDBs (disable pdb-unhealthy-pod-eviction-check webhook in calico-system namespace)

Thomas Morinrequested to merge
kyverno-tigera-load into main

Closes #1881 (closed)

This MR ensures that the pdb-unhealthy-pod-eviction-check webhook ignores the namespaces that this policy won't match. This should help avoid the Kyverno load which is due to Tigera.

The load reduction is measurable (change applied around 16:27): image

Note that the background audit check is unchanged by this.

Edited by Thomas Morin

Merge request reports