From ce8e7313fe5d1b487a992ac443eb2dc59814c2f5 Mon Sep 17 00:00:00 2001
From: Nikolai Rodionov <allanger@badhouseplants.net>
Date: Sat, 28 Sep 2024 21:53:35 +0200
Subject: [PATCH] Install kyverno

---
 installations/platform/helmfile.yaml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/installations/platform/helmfile.yaml b/installations/platform/helmfile.yaml
index 4d69d24..c7d52e8 100644
--- a/installations/platform/helmfile.yaml
+++ b/installations/platform/helmfile.yaml
@@ -16,6 +16,8 @@ repositories:
     url: https://charts.goauthentik.io/
   - name: minio-standalone
     url: https://charts.min.io/
+  - name: kyverno
+    url: https://kyverno.github.io/kyverno/
 releases:
   - name: argocd
     chart: argo/argo-cd
@@ -64,6 +66,8 @@ releases:
     version: 2024.8.3
     namespace: platform
     createNamespace: false
+    needs:
+      - platform/db-operator
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -75,3 +79,24 @@ releases:
     inherit:
       - template: default-env-values
       - template: default-env-secrets
+  - name: kyverno
+    chart: kyverno/kyverno
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    version: 3.2.6
+  - name: kyverno-policies
+    chart: kyverno/kyverno-policies
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    version: 3.2.5
+    needs:
+      - kyverno/kyverno
+  - name: custom-kyverno-policies
+    chart: ../../kustomizations/kyverno/
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    needs:
+      - kyverno/kyverno