diff --git a/installations/platform/helmfile.yaml b/installations/platform/helmfile.yaml index ac0b4c0..85bdcb8 100644 --- a/installations/platform/helmfile.yaml +++ b/installations/platform/helmfile.yaml @@ -77,7 +77,6 @@ releases: - name: kyverno chart: kyverno/kyverno namespace: kyverno - condition: workload.enabled labels: bootstrap: true version: 3.3.6 @@ -85,7 +84,6 @@ releases: - name: kyverno-policies chart: kyverno/kyverno-policies namespace: kyverno - condition: workload.enabled labels: bootstrap: true version: 3.3.4 @@ -93,9 +91,8 @@ releases: - kyverno/kyverno - name: custom-kyverno-policies - chart: ../../kustomizations/kyverno/ + chart: "../../kustomizations/kyverno/{{ .Environment.Name }}" namespace: kyverno - condition: workload.enabled labels: bootstrap: true needs: diff --git a/kustomizations/kyverno/pvc-patch.yaml b/kustomizations/kyverno/badhouseplants/pvc-patch.yaml similarity index 100% rename from kustomizations/kyverno/pvc-patch.yaml rename to kustomizations/kyverno/badhouseplants/pvc-patch.yaml diff --git a/kustomizations/kyverno/etersoft/pvc-patch.yaml b/kustomizations/kyverno/etersoft/pvc-patch.yaml new file mode 100644 index 0000000..78d4338 --- /dev/null +++ b/kustomizations/kyverno/etersoft/pvc-patch.yaml @@ -0,0 +1,20 @@ +apiVersion: kyverno.io/v1 +kind: ClusterPolicy +metadata: + name: replace-storage-class-by-openebs +spec: + rules: + - name: replace-storage-class + match: + any: + - resources: + kinds: + - PersistentVolumeClaim + namespaces: + - application + - platform + mutate: + patchStrategicMerge: + metadata: + annotations: + volume.kubernetes.io/selected-node: yekaterinburg