sigstore/helm-charts

Policy Controller needs to bump default ReplicaCount to satisfy default PDB

avo-sepp opened this issue · 0 comments

Description

The Policy Controller Helm Chart defaults webhook.replicaCount to 1 and PDB minAvailable to 1. This means a default installation of Policy Controller will prevent Kubernetes upgrades. A better default is to increase webhook.replicaCount to 2, or disable the PDB by default.

My vote is to incresae replicaCount to 2 because this prevents other issues with the webhook being unavailable during upgrades.