infra/stacks/kyverno/modules/kyverno
Viktor Barzin 16cde1eab5 add Kyverno TLS secret sync + enhance renewal pipeline
Kyverno ClusterPolicy clones tls-secret from kyverno namespace to all
namespaces with synchronize=true. Renewal pipeline now updates the source
secret via kubectl, verifies cert validity, and sends Slack notification.
2026-03-23 22:19:34 +02:00
..
dependency-init-containers.tf extract monitoring, nvidia, mailserver, cloudflared, kyverno from platform [ci skip] 2026-03-17 21:34:11 +00:00
main.tf extract monitoring, nvidia, mailserver, cloudflared, kyverno from platform [ci skip] 2026-03-17 21:34:11 +00:00
registry-credentials.tf fix registry auth: add Kyverno RBAC for Secrets + containerd TLS skip-verify 2026-03-22 23:47:29 +02:00
resource-governance.tf fix: increase tier-2-gpu quota to 12Gi, add NvidiaExporterDown alert 2026-03-23 03:04:33 +02:00
security-policies.tf extract monitoring, nvidia, mailserver, cloudflared, kyverno from platform [ci skip] 2026-03-17 21:34:11 +00:00
tls-secret-sync.tf add Kyverno TLS secret sync + enhance renewal pipeline 2026-03-23 22:19:34 +02:00