---
- name: Create Kyverno namespace
  ansible.builtin.command:
    argv:
      - kubectl
      - apply
      - -f
      - "{{ noble_repo_root }}/clusters/noble/apps/kyverno/namespace.yaml"
  environment:
    KUBECONFIG: "{{ noble_kubeconfig }}"
  changed_when: true

- name: Install Kyverno operator
  ansible.builtin.command:
    argv:
      - helm
      - upgrade
      - --install
      - kyverno
      - kyverno/kyverno
      - -n
      - kyverno
      - --version
      - "3.7.1"
      - -f
      - "{{ noble_repo_root }}/clusters/noble/apps/kyverno/values.yaml"
      - --wait
      - --timeout
      - 15m
  environment:
    KUBECONFIG: "{{ noble_kubeconfig }}"
  changed_when: true