Files
kubernetes-security-baselin…/argocd/apps/policies.yaml
T
2026-08-09 19:52:19 -04:00

25 lines
604 B
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: security-policies
namespace: argocd
annotations:
# Policies wait for Kyverno's CRDs/controller to exist.
argocd.argoproj.io/sync-wave: "0"
spec:
project: default
source:
repoURL: https://github.com/REPLACE_WITH_GITHUB_OWNER/kubernetes-security-baseline.git
targetRevision: main
path: policies/kyverno
destination:
server: https://kubernetes.default.svc
namespace: security-baseline
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true