---
- name: Install Kyverno policy chart (PSS baseline, Audit)
  ansible.builtin.command:
    argv:
      - helm
      - upgrade
      - --install
      - kyverno-policies
      - kyverno/kyverno-policies
      - -n
      - kyverno
      - --version
      - "3.7.1"
      - -f
      - "{{ noble_repo_root }}/clusters/noble/bootstrap/kyverno/policies-values.yaml"
      - --wait
      - --timeout
      - 10m
  environment:
    KUBECONFIG: "{{ noble_kubeconfig }}"
  changed_when: true