Files
kubernetes-security-baselin…/argocd/apps/kyverno.yaml
T

26 lines
649 B
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: kyverno
namespace: argocd
annotations:
argocd.argoproj.io/sync-wave: "-2"
spec:
project: default
source:
repoURL: https://kyverno.github.io/kyverno/
chart: kyverno
targetRevision: 3.3.7
destination:
server: https://kubernetes.default.svc
namespace: kyverno
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
# Kyverno policy CRDs exceed Kubernetes' client-side apply annotation
# limit, so replacement avoids storing the oversized last-applied blob.
- Replace=true