From 73d512f13dd0172a2b7697d67420302c94bfa6a9 Mon Sep 17 00:00:00 2001
From: juvdiaz <juvenal.diaz@oracle.com>
Date: Thu, 28 May 2026 18:45:49 -0600
Subject: [PATCH] Move Kyverno hook jobs to app workers

---
 bootstrap/platform/main.tf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/bootstrap/platform/main.tf b/bootstrap/platform/main.tf
index 11815f0..9d9c74a 100644
--- a/bootstrap/platform/main.tf
+++ b/bootstrap/platform/main.tf
@@ -782,6 +782,11 @@ resource "helm_release" "kyverno" {
 
   values = [
     yamlencode({
+      crds = {
+        migration = {
+          nodeSelector = local.kyverno_node_selector
+        }
+      }
       admissionController = {
         nodeSelector = local.kyverno_node_selector
         replicas     = 1
@@ -834,6 +839,9 @@ resource "helm_release" "kyverno" {
           }
         }
       }
+      webhooksCleanup = {
+        nodeSelector = local.kyverno_node_selector
+      }
     })
   ]
 }