feat: add kyverno component

pelotech · Nov 25, 2024 · 5c43091 · 5c43091
1 parent 9a0a4ac
commit 5c43091
Show file tree

Hide file tree

Showing 2 changed files with 79 additions and 0 deletions.
diff --git a/gitops/components/kyverno/kustomize.yaml b/gitops/components/kyverno/kustomize.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+  - ./resources.yaml
diff --git a/gitops/components/kyverno/resources.yaml b/gitops/components/kyverno/resources.yaml
@@ -0,0 +1,74 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kyverno
+  namespace: argocd
+spec:
+  destination:
+    namespace: kyverno
+    server: https://kubernetes.default.svc
+  project: admins
+  source:
+    chart: kyverno
+    repoURL: https://kyverno.github.io/kyverno
+    targetRevision: 3.3.3
+    helm:
+      valuesObject:
+        features:
+          backgroundScan:
+            backgroundScanInterval: 1h
+        admissionController:
+          hostNetwork: true
+          dnsPolicy: ClusterFirstWithHostNet
+          webhookServer:
+            port: 9443
+          metricsService:
+            port: 9444
+          startupProbe:
+            httpGet:
+              port: 9443
+          livenessProbe:
+            httpGet:
+              port: 9443
+          readinessProbe:
+            httpGet:
+              port: 9443
+        backgroundController:
+          hostNetwork: true
+          dnsPolicy: ClusterFirstWithHostNet
+          server:
+            port: 9445
+          metricsService:
+            port: 9446
+        cleanupController:
+          hostNetwork: true
+          dnsPolicy: ClusterFirstWithHostNet
+          server:
+            port: 9447
+          webhookServer:
+            port: 9448
+          metricsService:
+            port: 9449
+          startupProbe:
+            httpGet:
+              port: 9447
+          livenessProbe:
+            httpGet:
+              port: 9447
+          readinessProbe:
+            httpGet:
+              port: 9447
+        reportsController:
+          hostNetwork: true
+          dnsPolicy: ClusterFirstWithHostNet
+          server:
+            port: 9450
+          metricsService:
+            port: 9451
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
+      - CreateNamespace=true