Currently kyverno gets stuck in 'terminating' state when draining a
node, this is due unavailability for the addmission webhook that it
provides itself.

This patch pushes the replica count up and adds a PDB, which should help
to make sure it doesn't happen again.

To (temporarily) fix the situation you can delete the the
validationwebhookconfigurations for kyverno until the pod is terminated
and rollout kyverno with a higher replica count again.