add kyverno to staging

Signed-off-by: Andy Sadler <[email protected]>
redhat-appstudio · Jan 10, 2025 · d0d266f · d0d266f
1 parent 6b67de2
commit d0d266f
Show file tree

Hide file tree

Showing 7 changed files with 78 additions and 0 deletions.
diff --git a/argo-cd-apps/base/member/infra-deployments/kustomization.yaml b/argo-cd-apps/base/member/infra-deployments/kustomization.yaml
@@ -30,5 +30,6 @@ resources:
   - konflux-rbac
   - konflux-info
   - vector-tekton-logs-collector
+  - kyverno
 components:
   - ../../../k-components/inject-infra-deployments-repo-details
diff --git a/argo-cd-apps/base/member/infra-deployments/kyverno/kustomization.yaml b/argo-cd-apps/base/member/infra-deployments/kyverno/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- kyverno.yaml
diff --git a/argo-cd-apps/base/member/infra-deployments/kyverno/kyverno.yaml b/argo-cd-apps/base/member/infra-deployments/kyverno/kyverno.yaml
@@ -0,0 +1,47 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: kyverno
+  labels:
+    noSourceTransform: "true"
+spec:
+  generators:
+    - merge:
+        mergeKeys:
+          - nameNormalized
+        generators:
+          - clusters:
+              values:
+                sourceRoot: components/kyverno
+                environment: staging
+                clusterDir: ""
+          - list:
+              elements: []
+  template:
+    metadata:
+      name: kyverno-{{nameNormalized}}
+    spec:
+      project: default
+      sources:
+        - chart: kyverno
+          repoURL: https://kyverno.github.io/kyverno/
+          targetRevision: 3.3.4
+          helm:
+            valueFiles:
+              - $values/{{values.sourceRoot}}/{{values.environment}}/values.yaml
+      destination:
+        namespace: konflux-kyverno
+        server: '{{server}}'
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+          - CreateNamespace=true
+          - Replace=true # Recommended by upstream
+        retry:
+          limit: 50
+          backoff:
+            duration: 10s
+            factor: 2
+            maxDuration: 3m
diff --git a/argo-cd-apps/overlays/development/delete-applications.yaml b/argo-cd-apps/overlays/development/delete-applications.yaml
@@ -118,3 +118,9 @@ kind: ApplicationSet
 metadata:
   name: konflux-info
 $patch: delete
+---
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: kyverno
+$patch: delete
diff --git a/argo-cd-apps/overlays/konflux-public-production/delete-applications.yaml b/argo-cd-apps/overlays/konflux-public-production/delete-applications.yaml
@@ -39,3 +39,9 @@ kind: ApplicationSet
 metadata:
   name: nvme-storage-configurator
 $patch: delete
+---
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: kyverno
+$patch: delete
diff --git a/argo-cd-apps/overlays/staging-downstream/delete-applications.yaml b/argo-cd-apps/overlays/staging-downstream/delete-applications.yaml
@@ -62,3 +62,9 @@ $patch: delete
 # metadata:
 #   name: nvme-storage-configurator
 # $patch: delete
+---
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: kyverno
+$patch: delete
diff --git a/components/kyverno/staging/values.yaml b/components/kyverno/staging/values.yaml
@@ -0,0 +1,8 @@
+admissionController:
+  replicas: 3
+backgroundController:
+  replicas: 3
+cleanupController:
+  replicas: 3
+reportsController:
+  replicas: 3