diff --git a/kyverno-integration/modules/enforce/kyverno-pss-exceptions.yaml b/kyverno-integration/modules/enforce/kyverno-pss-exceptions.yaml new file mode 100644 index 0000000..dce95b4 --- /dev/null +++ b/kyverno-integration/modules/enforce/kyverno-pss-exceptions.yaml @@ -0,0 +1,26 @@ +kind: Application +apiVersion: argoproj.io/v1alpha1 +metadata: + name: kyverno-pss-policies-enforce-exceptions + namespace: argocd +spec: + project: default + source: + repoURL: cnoe://exceptions + targetRevision: HEAD + path: "." + directory: + recurse: true + destination: + server: "https://kubernetes.default.svc" + syncPolicy: + syncOptions: + - Replace=true + automated: + selfHeal: true + retry: + limit: 30 + backoff: + duration: 5s + factor: 2 + maxDuration: 3m0s diff --git a/kyverno-integration/modules/enforce/kyverno-pss-policies-enforce.yaml b/kyverno-integration/modules/enforce/kyverno-pss-policies-enforce.yaml index 5a0f058..667ca40 100644 --- a/kyverno-integration/modules/enforce/kyverno-pss-policies-enforce.yaml +++ b/kyverno-integration/modules/enforce/kyverno-pss-policies-enforce.yaml @@ -1,4 +1,3 @@ ---- kind: Application apiVersion: argoproj.io/v1alpha1 metadata: @@ -32,30 +31,3 @@ spec: duration: 5s factor: 2 maxDuration: 3m0s ---- -kind: Application -apiVersion: argoproj.io/v1alpha1 -metadata: - name: kyverno-pss-policies-enforce-exceptions - namespace: argocd -spec: - project: default - source: - repoURL: cnoe://exceptions - targetRevision: HEAD - path: "." - directory: - recurse: true - destination: - server: "https://kubernetes.default.svc" - syncPolicy: - syncOptions: - - Replace=true - automated: - selfHeal: true - retry: - limit: 30 - backoff: - duration: 5s - factor: 2 - maxDuration: 3m0s