kyverno: [Bug] CustomResourceDefinition.apiextensions.k8s.io "policies.kyverno.io" is invalid: metadata.annotations: Too long: must have at most 262144 bytes

We can get this in 1.8.2 🤞

Yes, we are aware of this issue, we documented it along with the fix here https://kyverno.io/docs/installation/#notes-for-argocd-users

I think this is the link needed for ArgoCD users: https://kyverno.io/docs/installation/platform-notes/#notes-for-argocd-users

Just in case others hit this and use spinnaker. The option appears to be to add the strategy.spinnaker.io/replace annotation to all resources you want spinnaker to use replace for instead of apply

https://spinnaker.io/docs/reference/providers/kubernetes-v2/

As of Spinnaker 1.14, you can force Spinnaker to use replace instead of of apply while deploying a Kubernetes resource. This may be useful for resources such as ConfigMap which may exceed the annotation size limit of 262144 characters.

When set to 'true' for a versioned resource, this will update your resources using replace. Refer to [Kubernetes Object Management](https://kubernetes.io/docs/concepts/overview/object-management-kubectl/overview/#imperative-object-configuration) for more details on object configuration and trade-offs.

The default behavior is 'false'.

So I guess we have a couple possible options:

• fork the CRDs and manage them ourselves going forward by adding the annotation and set installCRDs: false - might work.
• contribute / suggest adding option to the Helm chart to allow adding optional annotations to the CRDs so spinnaker knows to run replace. I think I might open an issue to see if the project/community is open to this solution.

Closing as the documentation is available and provides a workaround. Please reopen if this needs to be discussed further.