Files
kubernetes-security-baselin…/argocd/apps/kyverno.yaml
T
swaphb 0e3e2d89f3
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m12s
upgrade kyverno and fix policy validation
2026-08-10 17:42:09 -04:00

32 lines
849 B
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: kyverno
namespace: argocd
annotations:
argocd.argoproj.io/sync-wave: "-2"
spec:
project: default
source:
repoURL: https://kyverno.github.io/kyverno/
chart: kyverno
# Chart 3.8.2 removes the deprecated bitnami/kubectl hook image used by
# the older chart and deploys Kyverno app version 1.18.2.
targetRevision: 3.8.2
helm:
values: |
crds:
annotations:
# The two policy CRDs exceed client-side apply's annotation limit.
argocd.argoproj.io/sync-options: ServerSideApply=true
destination:
server: https://kubernetes.default.svc
namespace: kyverno
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
- ServerSideApply=true