Files
launchpad/infra/base/kyverno.yaml

60 lines
1.3 KiB
YAML

apiVersion: v1
kind: Namespace
metadata:
name: kyverno
annotations:
argocd.argoproj.io/sync-wave: "-2"
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: kyverno
namespace: argocd
labels:
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: platform
app.kubernetes.io/managed-by: argocd
annotations:
argocd.argoproj.io/sync-wave: "-1"
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
ignoreDifferences:
- group: apiextensions.k8s.io
kind: CustomResourceDefinition
jsonPointers:
- /metadata/labels
- /metadata/annotations
- /metadata/finalizers
- group: argoproj.io/v1alpha1
kind: Application
jsonPointers:
- /metadata/finalizers
project: default
source:
chart: kyverno
repoURL: https://kyverno.github.io/kyverno/
targetRevision: v3.7.0 # Update to latest stable version
helm:
releaseName: kyverno
valuesObject:
grafana:
enabled: true
namespace: monitoring
destination:
server: https://kubernetes.default.svc
namespace: kyverno
syncPolicy:
automated:
prune: true
selfHeal: true
allowEmpty: false
syncOptions:
- CreateNamespace=true
- Validate=true
- ServerSideApply=true