feat: Add app Kyverno (#108)

With Kyverno, we can apply policies to our cluster. With this change, we
introduce a policy that changes all deployments to show 3 replicas.

apps/kyverno/enforce-replica.yaml

@@ -0,0 +1,17 @@
+apiVersion: "kyverno.io/v1"
+kind: "ClusterPolicy"
+metadata:
+  name: "enforce-replicas"
+spec:
+  background: true
+  rules:
+  - name: "set-replicas"
+    match:
+      resources:
+        kinds:
+        - "Deployment"
+    mutate:
+      patchStrategicMerge:
+        spec:
+          replicas: 3
+

apps/kyverno/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - enforce-replica.yaml

infra/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
   - descheduler
   - external-dns
   - kured
+  - kyverno
   - metallb
   - rook-ceph
   - secret-generator

infra/kyverno/helm-release.yaml

@@ -0,0 +1,20 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: kyverno
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: kyverno
+      sourceRef:
+        kind: HelmRepository
+        name: kyverno
+      interval: 1h
+  values:
+    admissionController:
+      replicas: 3
+    backgroundController:
+      replicas: 3
+    reportsController:
+      replicas: 3

infra/kyverno/helm-repository.yaml

@@ -0,0 +1,7 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: kyverno
+spec:
+  url: https://kyverno.github.io/kyverno/
+  interval: 1h

infra/kyverno/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kyverno
+resources:
+- helm-release.yaml
+- helm-repository.yaml
+- namespace.yaml

infra/kyverno/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kyverno