UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

Kyverno docs

Merged riley.odonnell requested to merge kyverno-docs into master
2 files
+ 20
19
Compare changes
  • Side-by-side
  • Inline
Files
2
@@ -8,21 +8,20 @@ Kyverno is a policy engine designed for Kubernetes, where policies are managed a
```mermaid
graph LR
subgraph "Kyverno"
webhook("Webhook") --> policyreporter{{PolicyReporter}}
graph LR
subgraph "Kubernetes API Server"
Operator("AdmissionReview")
Policy("Policy")
end
subgraph "Logging"
policyreporter{{PolicyReporter}} --> logging(Logging)
end
subgraph "Kubernetes API"
api("Kubernetes API") --> webhook("Webhook")
policyreporter{{PolicyReporter}} --> api("Kubernetes API")
subgraph "kubectl"
kctl(kubectl) --> Policy
end
subgraph "kubectl"
ctl("kubectl") --> api("Kubernetes API")
subgraph "Kyverno"
Operator("AdmissionReview") --> webhook("WebHook")
Policy("Policy") --> policyController{{PolicyController}}
generateController{{GenerateController}}
end
```
@@ -31,10 +30,6 @@ graph LR
Data from Kyverno is not stored by the app directly, it is stored as objects in the Kubernetes API.
### Database
Kyverno doesn't have a database.
### Istio Configuration
When deploying to k3d, istio-system should be added from `excludedNamespaces` under the `allowedDockerRegistries` violations. This can be done by modifying `chart/values.yaml` file or passing an override file with the values set as seen below. This is for development purposes only: production should not allow containers in the `istio-system` namespace to be pulled from outside of Registry1.
@@ -51,7 +46,13 @@ kyverno:
## High Availability
High availability is accomplished by increasing the replicas in the values file of this helm chart.
High availability is accomplished by increasing the replicas in the values file of this helm chart. The recommended replica counts for HA is at least 3 which is enabled by default in BigBang chart.
```yaml
kyverno:
values:
replicaCount: 3
```
## Single Sign on (SSO)
@@ -59,8 +60,8 @@ None. This service doesn't have a web interface.
## Licencing
[Apache 2.0 License](https://github.com/open-policy-agent/gatekeeper/blob/master/LICENSEhttps://github.com/kyverno/kyverno/blob/main/LICENSE)
[Apache 2.0 License](https://github.com/kyverno/kyverno/blob/main/LICENSE)
## Dependencies
None.
kyverno is a dependency of kyvernopolicies. KyvernoPolicies is a collection of Kyverno security and best-practice policies for Kyverno
Loading