Refactor Argo CD application management by removing noble-kyverno and noble-platform configurations, transitioning to Ansible-driven installations. Update documentation to clarify the optional nature of app-of-apps and the role of kustomization.yaml as an empty resource holder. Ensure users are informed about the need to delete stale Applications when migrating from previous configurations.

ansible/roles/noble_kyverno/tasks/main.yml

@@ -0,0 +1,32 @@
+---
+- name: Create Kyverno namespace
+  ansible.builtin.command:
+    argv:
+      - kubectl
+      - apply
+      - -f
+      - "{{ noble_repo_root }}/clusters/noble/apps/kyverno/namespace.yaml"
+  environment:
+    KUBECONFIG: "{{ noble_kubeconfig }}"
+  changed_when: true
+
+- name: Install Kyverno operator
+  ansible.builtin.command:
+    argv:
+      - helm
+      - upgrade
+      - --install
+      - kyverno
+      - kyverno/kyverno
+      - -n
+      - kyverno
+      - --version
+      - "3.7.1"
+      - -f
+      - "{{ noble_repo_root }}/clusters/noble/apps/kyverno/values.yaml"
+      - --wait
+      - --timeout
+      - 15m
+  environment:
+    KUBECONFIG: "{{ noble_kubeconfig }}"
+  changed_when: true