fix(clustertool): dont install ensure-digest kyverno policy by defaul…

…t, as it doesn't work with all operators
truecharts · Oct 25, 2024 · c0b6108 · c0b6108
1 parent 3b6266b
commit c0b6108
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml
@@ -1,3 +1,7 @@
+## This Can be enabled in the kustomization.yaml file.
+## Please note not every chart or application is compatible with this behavior
+## Primarily operators spinning their own pods, might include conflicting validation
+## Add manual exclusions where needed
 apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata:

diff --git a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml
@@ -3,4 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - schematic-to-pod.yaml
-  - ensure-digest.yaml
+  # - ensure-digest.yaml