Update Kyverno to 1.12
I have tested this upgrade plan in Vagrant and it seems to work. By keeping the webhook configurations, there is no window where a request could be applied without validation. The downside is that all requests will fail during the upgrade (failed to call webhook
) so this should be done during a planned maintenance window.