first commit

policies/kyverno/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - phase-2-placeholder.yaml
+

policies/kyverno/namespace.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: security-baseline
+  labels:
+    security-baseline/open: "true"
+

policies/kyverno/phase-2-placeholder.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: policy-baseline-status
+  namespace: security-baseline
+data:
+  phase: "2"
+  status: "GitOps target established; Kyverno policies arrive in phase 4"
+