Scooby HuskyandClaude Opus 4.6 b795f5aa8f Add Kyverno PolicyExceptions for third-party charts ...

ArgoCD, NetBird operator, and Scylla Manager are upstream Helm charts
that don't set resource limits, probes, drop-all capabilities, or
disable SA token automount. These audit-mode policy violations inflated
the cumulative Prometheus failure counter to ~3800.

- argocd: exempt from require-resource-limits, require-probes
- netbird-operator: exempt from require-resource-limits,
  disallow-automount-sa-token, require-probes
- scylla-manager: exempt from require-drop-all-capabilities,
  disallow-automount-sa-token

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-10 22:43:22 -05:00

..

argocd-exception.yaml

Add Kyverno PolicyExceptions for third-party charts

2026-03-10 22:43:22 -05:00

authentik-exception.yaml

Initial commit

2026-03-09 20:21:35 -05:00

disallow-automount-sa-token.yaml

Remove nessus from cluster configuration

2026-03-10 21:02:45 -05:00

disallow-default-namespace.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

disallow-host-namespaces.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

disallow-latest-tag.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

disallow-nodeport.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

disallow-privileged.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

fix-rook-osd-metadata-device.yaml

Fix create-block-db-symlink to use activate-osd volume

2026-03-10 22:25:31 -05:00

istio-waypoint-exception.yaml

Initial commit

2026-03-09 20:21:35 -05:00

netbird-operator-exception.yaml

Add Kyverno PolicyExceptions for third-party charts

2026-03-10 22:43:22 -05:00

rancher-exception.yaml

Initial commit

2026-03-09 20:21:35 -05:00

require-drop-all-capabilities.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-istio-ambient.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-labels.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-non-root.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-probes.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-resource-limits.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

require-ro-rootfs.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

restrict-image-registries.yaml

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

scylla-exception.yaml

Add Kyverno PolicyExceptions for third-party charts

2026-03-10 22:43:22 -05:00