Questions tagged [kyverno]
4 questions
0
votes
0 answers
using kyverno instead of apparmor
we want to use AppArmor for pod and container security. we have Kyverno and it's possible to add some capabilities using that.
I want to know if it is possible to replace AppArmor with Kyverno for our needs in kubernetes? I mean is it possible to…
Michael Cab
- 13
- 2
0
votes
0 answers
Using a variable in the namespace of a generated resource
I've created a policy that generates Services for every Deployment in a namespace. The one thing I can't figure out is that it's a Policy rather than a ClusterPolicy and I want to make the namespace attribute dynamic. (Because the policy is part of…
Brad Mace
- 1,024
- 3
- 17
- 32
0
votes
1 answer
Require array item using Kyverno policy
Trying to create a Kyverno policy that requires certain array values. They have examples for "maps" such as labels, but I didn't see anything specifically about arrays.
Here's a sample Application resource:
apiVersion: argoproj.io/v1alpha1
kind:…
Brad Mace
- 1,024
- 3
- 17
- 32
-1
votes
1 answer
kyverno pods stuck in crashloop
Two of our three Kyverno pods keep getting stuck in crash loops.
State details in ArgoCD are:
back-off 5m0s restarting failed container=kyverno pod=kyverno-85b8ccfffd-7vb4t_kyverno(cf50fb6d-a1c2-4384-bdbf-bebe865daa73)
All I can find in the logs…
Brad Mace
- 1,024
- 3
- 17
- 32