added repo

2026-08-26 03:39:42 +05:30
parent 45c25a95af
commit b8575bb8b9
6889 changed files with 1217125 additions and 0 deletions
@@ -0,0 +1,73 @@
+Chart version: {{ .Chart.Version }}
+Kyverno version: {{ default .Chart.AppVersion (default .Values.admissionController.container.image.tag .Values.admissionController.initContainer.image.tag) }}
+
+Thank you for installing {{ .Chart.Name }}! Your release is named {{ .Release.Name }}.
+
+The following components have been installed in your cluster:
+{{- if .Values.crds.install }}
+- CRDs
+{{- end }}
+- Admission controller
+{{- if .Values.reportsController.enabled }}
+- Reports controller
+{{- end }}
+{{- if .Values.cleanupController.enabled }}
+- Cleanup controller
+{{- end }}
+{{- if .Values.backgroundController.enabled }}
+- Background controller
+{{- end }}
+{{- if .Values.reportsServer.enabled }}
+- Reports server
+{{- end }}
+{{- if .Values.grafana.enabled }}
+- Grafana dashboard
+{{- end }}
+
+{{- if .Values.reportsServer.enabled }}
+
+## Reports Server Integration
+
+The Kyverno chart has been configured to install reports-server alongside Kyverno components.
+
+Reports-server provides centralized storage for policy reports and enables advanced reporting capabilities.
+
+{{- if .Values.reportsServer.waitForReady }}
+All Kyverno components have been configured to wait for reports-server to be ready before starting.
+This ensures proper initialization sequence.
+{{- end }}
+
+To access reports-server, use:
+  kubectl port-forward -n {{ include "kyverno.namespace" . }} svc/reports-server 8080:443
+
+
+
+{{- end }}
+
+{{ if not .Values.admissionController.replicas }}
+⚠️  WARNING: Setting the admission controller replica count below 2 means Kyverno is not running in high availability mode.
+{{- else if lt (int .Values.admissionController.replicas) 2 }}
+⚠️  WARNING: Setting the admission controller replica count below 2 means Kyverno is not running in high availability mode.
+{{- end }}
+
+{{- if semverCompare "<1.21.0" .Capabilities.KubeVersion.Version }}
+⚠️  WARNING: The minimal Kubernetes version officially supported by Kyverno is 1.21. Earlier versions are untested and Kyverno is not guaranteed to work with Kubernetes {{ .Capabilities.KubeVersion.Version }}.
+{{- end }}
+
+{{- with .Values.config.matchConditions }}
+⚠️  WARNING: Match conditions require a Kubernetes 1.27+ cluster with `AdmissionWebhookMatchConditions` feature gate enabled.
+{{- end }}
+
+{{- with .Values.features.generateMutatingAdmissionPolicy.enabled }}
+⚠️  WARNING: Generating MutatingAdmissionPolicy requires a Kubernetes 1.32+ cluster with `MutatingAdmissionPolicy` feature gate and `admissionregistration.k8s.io` API group enabled.
+{{- end }}
+
+{{- with .Values.features.mutatingAdmissionPolicyReports.enabled }}
+⚠️  WARNING: Generating reports from MutatingAdmissionPolicies requires a Kubernetes 1.32+ cluster with `MutatingAdmissionPolicy` feature gate and `admissionregistration.k8s.io` API group enabled.
+{{- end }}
+
+{{ if not .Values.features.policyExceptions.enabled }}
+⚠️  WARNING: PolicyExceptions are disabled by default. To enable them, set '--enablePolicyException' to true.
+{{- end }}
+
+💡 Note: There is a trade-off when deciding which approach to take regarding Namespace exclusions. Please see the documentation at https://kyverno.io/docs/installation/#security-vs-operability to understand the risks.