evict ingress-nginx-controller from kube-downscaler scope

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - Add dnsDomainRoot to fix an issue with applications using .cluster.local.
+- Add `ingress-nginx-kube-downscaler-eviction` ClusterPolicy to avoid conflict between the kube-downscaler and ingress-nginx-controller.
 
 ## [0.6.2] - 2024-10-31
 

helm/kyverno-policies-connectivity/templates/ingress-nginx-controller/KubeDownscalerEviction.yaml

@@ -0,0 +1,22 @@
+# THIS FILE IS GENERATED WITH 'make generate' - DO NOT EDIT MANUALLY
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: ingress-nginx-kube-downscaler-eviction
+spec:
+  validationFailureAction: Enforce
+  rules:
+    - name: add-downscaler-exclude-annotation
+      match:
+        all:
+        - resources:
+            kinds:
+              - Deployment
+              - autoscaling/v2/HorizontalPodAutoscaler
+            names:
+              - ingress-nginx-controller
+      mutate:
+        patchStrategicMerge:
+          metadata:
+            annotations:
+              downscaler/exclude: "true"

policies/connectivity/ingress-nginx-controller/KubeDownscalerEviction.yaml

@@ -0,0 +1,21 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: ingress-nginx-kube-downscaler-eviction
+spec:
+  validationFailureAction: Enforce
+  rules:
+    - name: add-downscaler-exclude-annotation
+      match:
+        all:
+        - resources:
+            kinds:
+              - Deployment
+              - autoscaling/v2/HorizontalPodAutoscaler
+            names:
+              - ingress-nginx-controller
+      mutate:
+        patchStrategicMerge:
+          metadata:
+            annotations:
+              downscaler/exclude: "true"