policies

This repository contains all of our common Kyverno policies.

add-egress-proxy

Injects the egress proxy vars in environments which request it by a special annotation

set-application-compare-options

Mutate Argo CD application resources to take into account mutating webhooks when doing the server side diff https://argo-cd.readthedocs.io/en/stable/user-guide/diff-strategies/#mutation-webhooks

validating-no-capabilities

Check for pods to drop capabilities and report if this is not the case

validating-non-root

Check for pods to run without root context and report if this is not the case