shuffle

cluster-resources/kyverno-config.yaml

@@ -1,5 +1,23 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
+metadata:
+  name: kyverno:pods-replicasets:manage
+  labels:
+    rbac.kyverno.io/aggregate-to-cleanup-controller: "true"
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - replicasets
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
 metadata:
   name: kyverno:secrets:view
   labels:

cluster-resources/policies/replicaset-cleaner.yaml

@@ -1,21 +1,3 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kyverno:pods-replicasets:manage
-  labels:
-    rbac.kyverno.io/aggregate-to-cleanup-controller: "true"
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - replicasets
-  - pods
-  verbs:
-  - get
-  - list
-  - watch
-  - delete
----
 apiVersion: kyverno.io/v2
 kind: ClusterCleanupPolicy
 metadata:

cluster-resources/policies/secret-cloner.yaml

@@ -1,37 +1,3 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kyverno:secrets:view
-  labels:
-    rbac.kyverno.io/aggregate-to-admission-controller: "true"
-    rbac.kyverno.io/aggregate-to-reports-controller: "true"
-    rbac.kyverno.io/aggregate-to-background-controller: "true"
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kyverno:secrets:manage
-  labels:
-    rbac.kyverno.io/aggregate-to-background-controller: "true"
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - create
-  - update
-  - delete
----
 apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata: