Forte/launchpad
6
0
Fork 0
Code Issues Pull Requests Actions Packages Wiki Activity

exclude trivy-system from kyverno policies

Browse Source
This commit is contained in:
snothub
2026-03-26 13:34:00 +01:00
parent c33abcc357
commit 1609f6afde
2 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cluster-resources/policies/deployment-verifier.yaml
View File

@@ -23,6 +23,7 @@ spec:
- monitoring - monitoring
- argocd - argocd
- traefik-system - traefik-system
- trivy-system
context: context:
- name: ownerReplicaSet - name: ownerReplicaSet
apiCall: apiCall:
@@ -59,6 +60,7 @@ spec:
- monitoring - monitoring
- argocd - argocd
- traefik-system - traefik-system
- trivy-system
skipBackgroundRequests: true skipBackgroundRequests: true
validate: validate:
allowExistingViolations: true allowExistingViolations: true

1
cluster-resources/policies/label-checker.yaml
View File

@@ -26,6 +26,7 @@ spec:
- monitoring - monitoring
- secrets - secrets
- kyverno - kyverno
- trivy-system
match: match:
any: any:
- resources: - resources: