kyverno/scripts/config/standard/kyverno.yaml

features:
  policyExceptions:
    enabled: true
  omitEvents:
    eventTypes: []

admissionController:
  extraArgs:
    v: 4
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - '*'
          resources:
            - secrets
          verbs:
            - create
            - update
            - patch
            - delete
            - get
            - list

backgroundController:
  extraArgs:
    v: 4
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - '*'
          resources:
            - configmaps
            - networkpolicies
            - resourcequotas
            - secrets
            - roles
            - rolebindings
            - limitranges
            - namespaces
            - nodes
            - nodes/status
            - pods
          verbs:
            - create
            - update
            - patch
            - delete
            - get
            - list

cleanupController:
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - ''
          resources:
            - pods
          verbs:
            - list
            - delete