kyverno/scripts/labs/argocd/7-kyverno.sh

#!/usr/bin/env bash

set -e

# CREATE KYVERNO APP

kubectl apply -f - <<EOF
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: kyverno
  namespace: argocd
spec:
  destination:
    namespace: kyverno
    server: https://kubernetes.default.svc
  project: default
  source:
    chart: kyverno
    repoURL: https://kyverno.github.io/kyverno
    targetRevision: 2.7.2
    helm:
      values: |
        serviceMonitor:
          enabled: true
        initContainer:
          extraArgs:
            - --loggingFormat=json
        extraArgs:
          - --enableTracing
          - --tracingAddress=tempo.monitoring
          - --tracingPort=4317
          - --loggingFormat=json
        cleanupController:
          tracing:
            enabled: true
            address: tempo.monitoring
            port: 4317
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true
EOF