diff --git a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml index 128e204314b..561254b1023 100644 --- a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml +++ b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml @@ -1,3 +1,7 @@ +## This Can be enabled in the kustomization.yaml file. +## Please note not every chart or application is compatible with this behavior +## Primarily operators spinning their own pods, might include conflicting validation +## Add manual exclusions where needed apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: diff --git a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml index 6a307478c51..65e2b0c575c 100644 --- a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml +++ b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml @@ -3,4 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - schematic-to-pod.yaml - - ensure-digest.yaml + # - ensure-digest.yaml