-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz
kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/README.md kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/main.yaml kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/values.schema.json
- Loading branch information
1 parent
a9bee93
commit a9a07d1
Showing
5 changed files
with
2,805 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.
46 changes: 46 additions & 0 deletions
46
kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,46 @@ | ||
[![CircleCI](https://circleci.com/gh/giantswarm/kyverno-app.svg?style=shield)](https://circleci.com/gh/giantswarm/kyverno-app) | ||
|
||
# kyverno | ||
|
||
Kyverno is an admission controller offering policy enforcement as a validating or mutating webhook. | ||
It audits or enforces policies for cluster resources, and produces reports about the compliance of the cluster. | ||
|
||
It is used to enforce [Pod Security Standards (PSS)][pss-policies] as a replacement for Pod Security Policies (PSPs), as well as many other community-supported policies for various use cases. For more information on the switch from PSP to PSS, see [our blog post][pss-blog]. | ||
|
||
## Installing | ||
|
||
There are 3 ways to install this app onto a workload cluster. | ||
|
||
1. [Using our web interface](https://docs.giantswarm.io/ui-api/web/app-platform/#installing-an-app) | ||
2. [Using our API](https://docs.giantswarm.io/api/#operation/createClusterAppV5) | ||
3. Directly creating the [App custom resource](https://docs.giantswarm.io/ui-api/management-api/crd/apps.application.giantswarm.io/) on the management cluster. | ||
|
||
## Configuring | ||
|
||
#### Kyverno Configurations | ||
|
||
Please see the [Kyverno docs][kyverno-docs] or the [configuration reference in this chart](https://github.com/giantswarm/kyverno-app/tree/main/helm/kyverno#configuration) for configurable values. | ||
|
||
See our [full reference page on how to configure applications](https://docs.giantswarm.io/app-platform/app-configuration/) for more details. | ||
|
||
## Development | ||
|
||
This repo contains subtrees from [giantswarm/kyverno](https://github.com/giantswarm/kyverno-upstream) and [giantswarm/policy-reporter](https://github.com/giantswarm/policy-reporter-upstream). | ||
|
||
### Steps to update Kyverno charts | ||
|
||
**Note:** There is automation in place to update both upstream fork and app charts on a monthly basis. However, you can manually trigger them if needed. | ||
|
||
1. Make sure that [giantswarm/kyverno](https://github.com/giantswarm/kyverno-upstream) is up to date and has the desired tag. | ||
|
||
2. Trigger the [sync-from-upstream](https://github.com/giantswarm/kyverno-app/actions/workflows/sync-from-upstream.yaml) action from the `main` branch. | ||
|
||
3. Review the PR generated by the actions bot. | ||
|
||
## Credit | ||
|
||
* https://github.com/kyverno/kyverno | ||
|
||
[kyverno-docs]: https://kyverno.io/docs/ | ||
[pss-blog]: https://www.giantswarm.io/blog/giant-swarms-farewell-to-psp | ||
[pss-policies]: https://kyverno.io/policies/?policytypes=Pod%2520Security%2520Standards%2520%28Baseline%29%2BPod%2520Security%2520Standards%2520%28Restricted%29 |
14 changes: 14 additions & 0 deletions
14
kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/main.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
annotations: | ||
application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/main.yaml | ||
application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/README.md | ||
application.giantswarm.io/team: shield | ||
application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz-meta/values.schema.json | ||
config.giantswarm.io/version: 1.x.x | ||
chartApiVersion: v2 | ||
chartFile: kyverno-0.18.1-7d40c7d6fd1605bb4b5a33d900c2d9d4b514b56c.tgz | ||
dateCreated: '2024-12-17T12:04:37.051914Z' | ||
digest: 9ce3be0d28278539000041f09f8d96e170f8b6fe064552bbfbe3e0e85f6423e0 | ||
home: https://github.com/giantswarm/kyverno-app | ||
icon: https://s.giantswarm.io/app-icons/kyverno/1/light.svg | ||
restrictions: | ||
clusterSingleton: true |
Oops, something went wrong.