Add kyverno chart 3.4.1

2025-05-13 11:54:58 +09:00
parent 459425ba58
commit af45031108
114 changed files with 65061 additions and 0 deletions
@@ -0,0 +1,50 @@
+Chart version: {{ .Chart.Version }}
+Kyverno version: {{ default .Chart.AppVersion (default .Values.admissionController.container.image.tag .Values.admissionController.initContainer.image.tag) }}
+
+Thank you for installing {{ .Chart.Name }}! Your release is named {{ .Release.Name }}.
+
+The following components have been installed in your cluster:
+{{- if .Values.crds.install }}
+- CRDs
+{{- end }}
+- Admission controller
+{{- if .Values.reportsController.enabled }}
+- Reports controller
+{{- end }}
+{{- if .Values.cleanupController.enabled }}
+- Cleanup controller
+{{- end }}
+{{- if .Values.backgroundController.enabled }}
+- Background controller
+{{- end }}
+{{- if .Values.grafana.enabled }}
+- Grafana dashboard
+{{- end }}
+
+{{ if not .Values.admissionController.replicas }}
+⚠️  WARNING: Setting the admission controller replica count below 2 means Kyverno is not running in high availability mode.
+{{- else if lt (int .Values.admissionController.replicas) 2 }}
+⚠️  WARNING: Setting the admission controller replica count below 2 means Kyverno is not running in high availability mode.
+{{- end }}
+
+{{- if semverCompare "<1.21.0" .Capabilities.KubeVersion.Version }}
+⚠️  WARNING: The minimal Kubernetes version officially supported by Kyverno is 1.21. Earlier versions are untested and Kyverno is not guaranteed to work with Kubernetes {{ .Capabilities.KubeVersion.Version }}.
+{{- end }}
+
+{{- with .Values.config.matchConditions }}
+⚠️  WARNING: Match conditions require a Kubernetes 1.27+ cluster with `AdmissionWebhookMatchConditions` feature gate enabled.
+{{- end }}
+
+{{- with .Values.features.generateValidatingAdmissionPolicy.enabled }}
+⚠️  WARNING: Generating ValidatingAdmissionPolicy requires a Kubernetes 1.27+ cluster with `ValidatingAdmissionPolicy` feature gate and `admissionregistration.k8s.io` API group enabled.
+{{- end }}
+
+{{- with .Values.features.validatingAdmissionPolicyReports.enabled }}
+⚠️  WARNING: Generating reports from ValidatingAdmissionPolicies requires a Kubernetes 1.27+ cluster with `ValidatingAdmissionPolicy` feature gate and `admissionregistration.k8s.io` API group enabled.
+{{- end }}
+
+{{ if not .Values.features.policyExceptions.enabled }}
+⚠️  WARNING: PolicyExceptions are disabled by default. To enable them, set '--enablePolicyException' to true.
+{{- end }}
+
+💡 Note: There is a trade-off when deciding which approach to take regarding Namespace exclusions. Please see the documentation at https://kyverno.io/docs/installation/#security-vs-operability to understand the risks.