wbsong111
a79e959c60
* kyverno 3.9.0(appVersion v1.19.0) 차트 추가 — 자체 빌드 이미지 사용 업스트림 이미지가 CVE 스캔 불가능한 베이스를 써서 자체 빌드로 대체한다(빌드 정의·근거는 hardened-containers). custom-values.yaml이 docker.io/paasup/* 7개 이미지를 가리키도록 고정했다. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * kyverno 3.4.1 삭제 3.9.0 추가 후 정리 --------- Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
57 lines
1.6 KiB
YAML
57 lines
1.6 KiB
YAML
# -- Internal settings used with `helm template` to generate install manifest
|
|
# @ignored
|
|
templating:
|
|
enabled: false
|
|
debug: false
|
|
version: ~
|
|
|
|
reportsServer:
|
|
# -- Kyverno reports-server is used in your cluster
|
|
enabled: false
|
|
|
|
groups:
|
|
# -- Install CRDs in group `kyverno.io`
|
|
# -- This field can be overwritten by setting crds.labels in the parent chart
|
|
kyverno:
|
|
cleanuppolicies: true
|
|
clustercleanuppolicies: true
|
|
clusterpolicies: true
|
|
globalcontextentries: true
|
|
policies: true
|
|
policyexceptions: true
|
|
updaterequests: true
|
|
|
|
# -- Install CRDs in group `reports.kyverno.io`
|
|
policies:
|
|
validatingpolicies: true
|
|
imagevalidatingpolicies: true
|
|
namespacedimagevalidatingpolicies: true
|
|
namespacedvalidatingpolicies: true
|
|
namespaceddeletingpolicies: true
|
|
policyexceptions: true
|
|
mutatingpolicies: true
|
|
generatingpolicies: true
|
|
namespacedgeneratingpolicies: true
|
|
deletingpolicies: true
|
|
|
|
# -- This field can be overwritten by setting crds.labels in the parent chart
|
|
reports:
|
|
clusterephemeralreports: true
|
|
ephemeralreports: true
|
|
|
|
# -- Install CRDs in group `wgpolicyk8s.io`
|
|
# -- This field can be overwritten by setting crds.labels in the parent chart
|
|
wgpolicyk8s:
|
|
clusterpolicyreports: true
|
|
policyreports: true
|
|
|
|
# -- Additional CRDs annotations
|
|
# -- This field can be overwritten by setting crds.annotations in the parent chart
|
|
annotations: {}
|
|
# argocd.argoproj.io/sync-options: Replace=true
|
|
# strategy.spinnaker.io/replace: 'true'
|
|
|
|
# -- Additional CRDs labels
|
|
# -- This field can be overwritten by setting crds.labels in the parent chart
|
|
customLabels: {}
|