fix(base-cluster/kyverno): change kubectl image

[tasches]

Summary by CodeRabbit

• New Features

  • Enhanced Kyverno image configuration: when no global registry is set, you can now specify explicit repository and tag values, providing finer control over image selection and deployments.

• Chores

  • Consolidated and cleaned up chart image annotations to reduce duplication and improve clarity in metadata listings.

[coderabbitai]

Walkthrough

The Kyverno Helm template switches from a single registry string to a structured image object with repository and tag fallbacks. The Chart.yaml Artifact Hub image annotations are consolidated by removing duplicate kubectl entries and condensing comments, retaining a single bats entry with inline references.

Changes

Cohort / File(s)	Summary of Changes
Kyverno Helm template image spec charts/base-cluster/templates/kyverno/kyverno.yaml	Replaces single image.registry usage with structured image fields: registry derived from global defaults, plus explicit repository and tag from global.kubectl.image.* when global.imageRegistry is unset. Surrounding conditionals unchanged.
Artifact Hub image annotations charts/base-cluster/Chart.yaml	Consolidates artifacthub.io/images entries: removes multiple bitnami/kubectl:1.32.3 lines; retains a single docker.io/bats/bats:v1.4.1 entry with inline comments referencing related YAML targets.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• chore(base-cluster): migrate kubectl image away from bitnami #1606 — Adjusts global kubectl image source; closely related to the new kubectl-based repository/tag usage in the Kyverno template.
• chore(base-cluster): migrate kyverno registries #1444 — Updates Kyverno image registries; related to changes in how Kyverno image fields are specified.
• ci(base-cluster/artifacthub-images): Update ArtifactHUB images #1407 — Modifies charts/base-cluster/Chart.yaml Artifact Hub image annotations, overlapping with this PR’s annotation consolidation.

Suggested reviewers

• marvinWolff
• cwrau

Poem

A rabbit taps at charts with glee,
Refactors images, tidy as can be.
Kyverno’s tag, repository aligned—
Annotations trimmed, duplicates resigned.
Hop, hop! Templates neat and true,
New carrots for the CI stew. 🥕✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title clearly and concisely describes the primary change—updating the kubectl image for the kyverno component in the base-cluster chart—using a conventional commit style that makes the intent immediately clear.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/kyverno-kubectl

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3c72480 and 143dea8.

📒 Files selected for processing (1)

• charts/base-cluster/Chart.yaml (1 hunks)

🚧 Files skipped from review as they are similar to previous changes (1)

• charts/base-cluster/Chart.yaml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: check licenses
• GitHub Check: lint helm chart (base-cluster)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 51a42a2 and e496be4.

📒 Files selected for processing (1)

• charts/base-cluster/templates/kyverno/kyverno.yaml (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: check licenses
• GitHub Check: Update release-please config file for a possibly new chart
• GitHub Check: lint helm chart (base-cluster)