-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Description
Is your feature request related to a problem? Please describe.
I'm exploring how kyverno works with my configuration. So far I'm pretty satisfied with what I can get from baseline policies provided by chart. My problem is that there is some expected violations of those policies, for example fluent-bit needs hostPath to fetch containerd logs and node-exporter needs host namespaces to get host metrics.
At this moment I'm not ready to maintain my own set of policies. Maybe there is way to precisely exclude certain resources from chart's policies?
Describe the solution you'd like
Way to configure excludes for chart provided policies.
Describe alternatives you've considered
Patching chart with kustomize (via helmfile) seems possible, though I haven't explored this yet.
Additional context
None.