jakman85andClaude Opus 4.8
587201317b
Add platform/kyverno/kustomization.yaml (renders the admission enforcing bundle) and enable the kyverno component in platform/kustomization.yaml (first, so admission policies precede other components). kustomize build verified. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
11 lines
548 B
YAML
11 lines
548 B
YAML
# PM integration glue (Phase 0): makes platform/kyverno a Flux platform component.
|
|
# Renders the in-cluster ENFORCING bundle authored by WS-TEST (admission/) — Kyverno install
|
|
# + the policies shared verbatim with the CI L0 gate (ADR-0011, docs/07 admission enforcement).
|
|
#
|
|
# The CI-only artifacts (tests/, servicedefinition/ payloads, scripts/run-l0.sh) are intentionally
|
|
# NOT rendered into the cluster — they run in CI (.gitea/ + ci/), not in-cluster.
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- admission
|