18 lines
688 B
YAML
18 lines
688 B
YAML
# Kyverno — noble (policy engine)
|
|
#
|
|
# helm repo add kyverno https://kyverno.github.io/kyverno/
|
|
# helm repo update
|
|
# kubectl apply -f clusters/noble/apps/kyverno/namespace.yaml
|
|
# helm upgrade --install kyverno kyverno/kyverno -n kyverno \
|
|
# --version 3.7.1 -f clusters/noble/apps/kyverno/values.yaml --wait --timeout 15m
|
|
#
|
|
# Baseline Pod Security policies (separate chart): see policies-values.yaml + README.md
|
|
#
|
|
# Raise Kubernetes client QPS/burst so under API/etcd load Kyverno does not hit
|
|
# "client rate limiter Wait" / flaky kyverno-health lease (defaults are very low).
|
|
admissionController:
|
|
container:
|
|
extraArgs:
|
|
clientRateLimitQPS: 30
|
|
clientRateLimitBurst: 60
|