kyverno(kube): fix deployment

2026-09-22 00:43:32 +00:00 · 2026-09-09 22:20:59 +02:00
parent a07ce44e6d
commit 26dd59845f
5 changed files with 39 additions and 3 deletions
@@ -0,0 +1,12 @@
+---
+# Kyverno ClusterPolicies.
+# Applied by the Flux Kustomization "kyverno-policies" which dependsOn "kyverno"
+# (the controller + CRDs). This split is required because Flux dry-runs every
+# resource in a Kustomization before applying any — the ClusterPolicy references
+# the kyverno.io/v2 CRD that only exists once the kyverno HelmRelease installs.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # Toggleable emergency relief: strips resources.requests.cpu cluster-wide.
+  # See the file header for the toggle (failurePolicy Ignore/Never) commands.
+  - policy-strip-cpu-requests.yaml