Some Helm charts render an object you need to own yourself and offer no

value to leave it out. This post covers two such cases from open issues:

the Kyverno chart creates a PodDisruptionBudget for every controller that

runs more than one replica, and the External Secrets chart renders its two

ValidatingWebhookConfigurations whenever it renders the webhook. In both,

the object is deleted from the rendered manifests, first with a Kustomize

patch over helm template , then with Kapitan 's

mutate generator .

Each patch was rendered from the chart version named in its section with

Helm 4.3.1, Kustomize 5.8.3, and Kapitan 0.36.3 with mutate 0.1.0, and the

result was installed on a kind cluster on Kubernetes 1.37.0. The guide

Patch a Helm chart compares the places such a

patch can live.

Kyverno Helm chart: PodDisruptionBudgets with more than one replica {#kyverno-pdb}

kyverno/kyverno#11469 ,

opened in October 2024, reports that the chart's PodDisruptionBudgets cannot

be turned off.…