Some Helm charts render an object you need to own yourself and offer no value to leave it out. This post covers two such cases from open issues: the Kyverno chart creates a PodDisruptionBudget for every controller that runs more than one replica, and the External Secrets chart renders its two ValidatingWebhookConfigurations whenever it renders the webhook. In both, the object is deleted from the rendered manifests, first with a Kustomize patch over helm template , then with Kapitan 's ...