organize deployment configuration
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m6s
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m6s
This commit is contained in:
@@ -0,0 +1,23 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: security-policies
|
||||
namespace: argocd
|
||||
annotations:
|
||||
# Policies wait for Kyverno's CRDs/controller to exist.
|
||||
argocd.argoproj.io/sync-wave: "0"
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://git.swaphb.com/swaphb/kubernetes-security-baseline-lab.git
|
||||
targetRevision: main
|
||||
path: policies/kyverno
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: security-baseline
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
Reference in New Issue
Block a user