infra/stacks/platform/modules/kyverno
Viktor Barzin ef158ed431
[ci skip] kyverno: scale to 2 replicas, eliminate API calls from policies
- Scale admission controller to 2 replicas with topology spread across nodes
- Rewrite inject-priority-class-from-tier: use namespaceSelector instead of
  API call per pod admission (eliminates Kyverno→API server round-trip)
- Rewrite sync-tier-label-from-namespace: same namespaceSelector approach
- Extract governance_tiers local to DRY up tier definitions
2026-02-24 23:09:56 +00:00
..
main.tf [ci skip] kyverno: scale to 2 replicas, eliminate API calls from policies 2026-02-24 23:09:56 +00:00
resource-governance.tf [ci skip] kyverno: scale to 2 replicas, eliminate API calls from policies 2026-02-24 23:09:56 +00:00
security-policies.tf [ci skip] Infrastructure hardening: security, monitoring, reliability, maintainability 2026-02-23 22:05:28 +00:00