UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

Kyverno docs

Merged riley.odonnell requested to merge kyverno-docs into master
All threads resolved!
1 file
+ 9
6
Compare changes
  • Side-by-side
  • Inline
@@ -35,13 +35,16 @@ Data from Kyverno is not stored by the app directly, it is stored as objects in
When deploying to k3d, istio-system should be added from `excludedNamespaces` under the `allowedDockerRegistries` violations. This can be done by modifying `chart/values.yaml` file or passing an override file with the values set as seen below. This is for development purposes only: production should not allow containers in the `istio-system` namespace to be pulled from outside of Registry1.
```yaml
kyverno:
kyvernopolicies:
values:
violations:
allowedDockerRegistries:
match:
excludedNamespaces:
- istio-system # allows creation for loadbalancer pods for various ports and various vendor loadbalancers
exclude:
any:
# Allows k3d load balancer to bypass policies.
- resources:
namespaces:
- istio-system
names:
- svclb-*
```
## High Availability
Loading