Scooby HuskyandClaude Opus 4.6 b795f5aa8f Add Kyverno PolicyExceptions for third-party charts ...

ArgoCD, NetBird operator, and Scylla Manager are upstream Helm charts
that don't set resource limits, probes, drop-all capabilities, or
disable SA token automount. These audit-mode policy violations inflated
the cumulative Prometheus failure counter to ~3800.

- argocd: exempt from require-resource-limits, require-probes
- netbird-operator: exempt from require-resource-limits,
  disallow-automount-sa-token, require-probes
- scylla-manager: exempt from require-drop-all-capabilities,
  disallow-automount-sa-token

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-10 22:43:22 -05:00

..

authentik

Remove nessus from cluster configuration

2026-03-10 21:02:45 -05:00

cert-manager

Initial commit

2026-03-09 20:21:35 -05:00

checkov/manifests

Initial commit

2026-03-09 20:21:35 -05:00

cilium

Initial commit

2026-03-09 20:21:35 -05:00

crowdsec

Switch hook jobs from bitnami/kubectl to alpine/k8s:1.32.13

2026-03-10 18:08:22 -05:00

envoy-gateway

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

external-dns

Initial commit

2026-03-09 20:21:35 -05:00

external-secrets

Initial commit

2026-03-09 20:21:35 -05:00

grafana

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

istio

Add ServiceEntry for wildcard host to fix Kiali KIA0104

2026-03-10 22:35:20 -05:00

kiali

Add envoy-gateway to Kiali gateway_api_classes

2026-03-10 20:28:15 -05:00

kyverno

Add Kyverno PolicyExceptions for third-party charts

2026-03-10 22:43:22 -05:00

metrics-server

Initial commit

2026-03-09 20:21:35 -05:00

mosquitto/manifests

Initial commit

2026-03-09 20:21:35 -05:00

netbird

Switch hook jobs from bitnami/kubectl to alpine/k8s:1.32.13

2026-03-10 18:08:22 -05:00

netbird-operator

Fix n8n, gitlab, and netbird-operator degraded states

2026-03-10 19:53:10 -05:00

percona-everest

Initial commit

2026-03-09 20:21:35 -05:00

prometheus

Fix talos client key PEM header for nginx compatibility

2026-03-10 20:31:31 -05:00

reloader

Initial commit

2026-03-09 20:21:35 -05:00

rook-ceph

Remove dedicated DB devices from Rook-Ceph OSD configuration

2026-03-10 22:06:34 -05:00

scylla

Initial commit

2026-03-09 20:21:35 -05:00

tetragon

Add followChildren default to tetragon shell-execution TracingPolicy

2026-03-10 17:39:38 -05:00

unpoller

Initial commit

2026-03-09 20:21:35 -05:00

vault

Switch hook jobs from bitnami/kubectl to alpine/k8s:1.32.13

2026-03-10 18:08:22 -05:00