diff --git a/documentation/installation.md b/documentation/installation.md index ed4af1bb10..dc41d0963f 100644 --- a/documentation/installation.md +++ b/documentation/installation.md @@ -2,7 +2,7 @@ # Installation -The Kyverno policy engine runs as an admission webhook and requires a CA-signed certificate and key to setup secure TLS communication with the kube-apiserver (the CA can be self-signed). +You can install Kyverno using the Helm chart or YAML files in this repository. ## Install Kyverno using Helm @@ -15,6 +15,12 @@ helm install --name my-release --namespace kyverno nirmata/kyverno ``` +Note: the namespace must be `kyverno`. + +## Install Kyverno using YAMLs + +The Kyverno policy engine runs as an admission webhook and requires a CA-signed certificate and key to setup secure TLS communication with the kube-apiserver (the CA can be self-signed). + There are 2 ways to configure the secure communications link between Kyverno and the kube-apiserver. ### Option 1: Use kube-controller-manager to generate a CA-signed certificate