diff --git a/clusters/titan.lan.huizinga.dev/infra/kyverno.yaml b/clusters/titan.lan.huizinga.dev/infra/kyverno.yaml new file mode 100644 index 0000000..7bb5673 --- /dev/null +++ b/clusters/titan.lan.huizinga.dev/infra/kyverno.yaml @@ -0,0 +1,14 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: kyverno + namespace: flux-system +spec: + interval: 15m + path: ./infra/kyverno + prune: true + timeout: 2m + sourceRef: + kind: GitRepository + name: flux-system + wait: true diff --git a/infra/kyverno/helm-release.yaml b/infra/kyverno/helm-release.yaml new file mode 100644 index 0000000..7822f6b --- /dev/null +++ b/infra/kyverno/helm-release.yaml @@ -0,0 +1,17 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: kyverno +spec: + chart: + spec: + chart: kyverno + reconcileStrategy: ChartVersion + sourceRef: + kind: HelmRepository + name: kyverno + version: 3.3.7 + interval: 15m + valuesFrom: + - kind: ConfigMap + name: kyverno-values diff --git a/infra/kyverno/helm-repository.yaml b/infra/kyverno/helm-repository.yaml new file mode 100644 index 0000000..3d79a14 --- /dev/null +++ b/infra/kyverno/helm-repository.yaml @@ -0,0 +1,7 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: kyverno +spec: + interval: 15m + url: https://kyverno.github.io/kyverno/ diff --git a/infra/kyverno/kustomization.yaml b/infra/kyverno/kustomization.yaml new file mode 100644 index 0000000..a3e632e --- /dev/null +++ b/infra/kyverno/kustomization.yaml @@ -0,0 +1,15 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kyverno +resources: + - ./namespace.yaml + - ./helm-repository.yaml + - ./helm-release.yaml + +configurations: + - ../../common/name-reference/helm-release.yaml + +configMapGenerator: + - name: kyverno-values + files: + - ./values.yaml diff --git a/infra/kyverno/namespace.yaml b/infra/kyverno/namespace.yaml new file mode 100644 index 0000000..b61ec8b --- /dev/null +++ b/infra/kyverno/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: kyverno diff --git a/infra/kyverno/values.yaml b/infra/kyverno/values.yaml new file mode 100644 index 0000000..ebd93c3 --- /dev/null +++ b/infra/kyverno/values.yaml @@ -0,0 +1,8 @@ +admissionController: + replicas: 2 +backgroundController: + replicas: 2 +cleanupController: + replicas: 2 +reportsController: + replicas: 2