Kyverno dashboard

chart/templates/kyverno/namespace.yaml

@@ -3,9 +3,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   labels:
-    admission.kyverno.sh/ignore: no-self-managing
-    control-plane: controller-manager
-    kyverno.sh/system: "yes"
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}

chart/templates/kyverno/values.yaml

@@ -3,6 +3,8 @@
 {{- end }}
 
 {{- define "bigbang.defaults.kyverno" -}}
+replicaCount: 3
+
 image:
   pullSecrets:
   - name: private-registry
@@ -13,8 +15,10 @@ networkPolicies:
   enabled: {{ .Values.networkPolicies.enabled }}
   controlPlaneCidr: {{ .Values.networkPolicies.controlPlaneCidr }}
 
-monitoring:
-  enabled: false #{{ .Values.monitoring.enabled }} To enable this, we need PodMonitor crd
+serviceMonitor:
+  enabled: {{ .Values.monitoring.enabled }}
+  dashboards:
+    namespace: monitoring
 
 istio:
   enabled: {{ .Values.istio.enabled }}

chart/values.yaml

@@ -335,14 +335,10 @@ kyverno:
   git:
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno
     path: "./chart"
-    tag: "2.1.2-bb.0"
+    tag: "2.1.3-bb.2"
 
   # -- Flux reconciliation overrides specifically for the Kyverno Package
-  flux:
-    install:
-      crds: CreateReplace
-    upgrade:
-      crds: CreateReplace
+  flux: {}
 
   # -- Values to passthrough to the kyverno chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/kyverno.git
   values: {}

tests/test-values.yaml

@@ -203,18 +203,9 @@ gatekeeper:
 kyverno:
   enabled: false
   values:
-    replicas: 1
+    replicaCount: 1
     bbtests:
       enabled: true
-      scripts:
-        image: registry1.dso.mil/ironbank/opensource/kubernetes-1.21/kubectl:v1.21.1
-        additionalVolumeMounts:
-          - name: "{{ .Chart.Name }}-test-config"
-            mountPath: /yaml
-        additionalVolumes:
-          - name: "{{ .Chart.Name }}-test-config"
-            configMap:
-              name: "{{ .Chart.Name }}-test-config"
 
 logging:
   enabled: true