updated descriptions more

chart/templates/gatekeeper/values.yaml

@@ -111,7 +111,7 @@ violations:  # Try to keep this in alpha order to make it easier to find keys
         # Fluentbit needs privileged to read and store the buffer for tailing logs from the nodes
         - logging/fluent-bit
         {{- if .Values.neuvector.enabled }}
-        # Neuvector needs priviledge to inspect network traffic
+        # Neuvector needs priviledge read and store to inspect network traffic
         - neuvector/neuvector-enforcer-pod.*
         - neuvector/neuvector-controller-pod.*
         {{- end }}
@@ -182,6 +182,11 @@ violations:  # Try to keep this in alpha order to make it easier to find keys
        {{- end }}
        {{- if .Values.neuvector.enabled }}
         # Neuvector requires hostpath volume types
+          # Neuvector mounts the following hostPaths:
+          # `/var/neuvector`: (as writable) for Neuvector's buffering and persistent state
+          # `/var/run`: communication to docker daemon
+          # `/proc`: monitoring of proccesses for malicious activity
+          # `/sys/fs/cgroup`: important files the controller wants to monitor for malicious content
         # https://github.com/neuvector/neuvector-helm/blob/master/charts/core/templates/enforcer-daemonset.yaml#L108
         - neuvector/neuvector-enforcer-pod.*
         - neuvector/neuvector-controller-pod.*

chart/templates/kyverno/policies/values.yaml

@@ -657,6 +657,11 @@ policies:
       {{- end }}
       {{- if .Values.neuvector.enabled }}
       # Neuvector requires HostPath volume types
+        # Neuvector mounts the following hostPaths:
+        # `/var/neuvector`: (as writable) for Neuvector's buffering and persistent state
+        # `/var/run`: communication to docker daemon
+        # `/proc`: monitoring of proccesses for malicious activity
+        # `/sys/fs/cgroup`: important files the controller wants to monitor for malicious content
       # https://github.com/neuvector/neuvector-helm/blob/master/charts/core/templates/enforcer-daemonset.yaml#L108
       - resources:
           namespaces: