stacks/kyverno-integration/modules/audit/kyverno-pss-policies-audit.yaml
Boris 'B' Kurktchiev 2b12c4d710
Stack: Kyverno (#38)
Signed-off-by: Boris 'B' Kurktchiev <kurktchiev@gmail.com>
2024-10-02 09:40:04 -04:00

33 lines
769 B
YAML

kind: Application
apiVersion: argoproj.io/v1alpha1
metadata:
name: kyverno-pss-policies-audit
namespace: argocd
spec:
project: default
source:
repoURL: https://github.com/kyverno/kyverno
targetRevision: 3.2.7
path: charts/kyverno-policies
helm:
releaseName: "kyverno-policies"
parameters:
- name: "podSecurityStandard"
value: restricted
- name: "validationFailureAction"
value: Audit
- name: "podSecuritySeverity"
value: High
destination:
server: "https://kubernetes.default.svc"
syncPolicy:
syncOptions:
- Replace=true
automated:
selfHeal: true
retry:
limit: 30
backoff:
duration: 5s
factor: 2
maxDuration: 3m0s