related: #24

Currently, Kyverno 1.10 will not clean up its ValidatingWebhookConfigurations and MutatingWebhookConfigurations when uninstalled, which will always result in the cluster being deadlocked. This is because Kyverno's webhooks intercept most Kubernetes API requests for validation, and if Kyverno no longer exists, it will fail.

This PR tells Kyverno to "fail open" on the resource webook, to prevent this issue.

We can revert this change once kyverno/kyverno#8390 is resolved.

Note, that the webhooks will still be left on uninstall with this change, they won't deadlock the cluster.

To remove the webhooks fully, follow Kyverno's guide, and run:

kubectl delete validatingwebhookconfiguration kyverno-resource-validating-webhook-cfg
kubectl delete mutatingwebhookconfiguration kyverno-resource-mutating-webhook-cfg

Also, I have included changes necessary to update to newer versions of Kyvernos's helm chart, but currently, we can't update past Kyverno 1.10.0 as Kyverno broke support for replicating secrets with longer than 63 characters in 1.10.1.

Note, chart 3.0.1 (our current default) includes Kyverno 1.10.0.