---
# Flux Kustomization for Kyverno ClusterPolicies.
# dependsOn "kyverno" (the controller + CRDs) so the kyverno.io/v2 CRD exists
# before Flux dry-runs the ClusterPolicy. Without this split, Flux fails the
# whole Kustomization at dry-run ("no matches for kind ClusterPolicy").
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: kyverno-policies
  namespace: flux-system
spec:
  interval: 5m
  prune: true
  sourceRef:
    kind: GitRepository
    name: homeprod
  path: ./kubernetes/system/kyverno-policies
  dependsOn:
    - name: kyverno