kvyerno: move helm values to file

Keeping the helm values inline to the applicationset is getting in our way, so we should move away from this if we can. This copies the approach that the `tracing-workload-otel-collector` applicationset uses. Signed-off-by: Andy Sadler <[email protected]>
redhat-appstudio · Jan 28, 2025 · ae4d7b7 · ae4d7b7
1 parent 585c387
commit ae4d7b7
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 11 deletions.
diff --git a/argo-cd-apps/base/member/infra-deployments/kyverno/kyverno.yaml b/argo-cd-apps/base/member/infra-deployments/kyverno/kyverno.yaml
@@ -27,17 +27,11 @@ spec:
           repoURL: https://kyverno.github.io/kyverno/
           targetRevision: 3.3.4
           helm:
-            values: |
-              admissionController:
-                replicas: 3
-              backgroundController:
-                replicas: 3
-              cleanupController:
-                replicas: 3
-              reportsController:
-                replicas: 3
-              policyReportsCleanup:
-                securityContext: null
+            valueFiles:
+            - $values/{{values.sourceRoot}}/{{values.environment}}/kyverno-values.yaml
+        - repoURL: https://github.com/redhat-appstudio/infra-deployments.git
+          targetRevision: main
+          ref: values
       destination:
         namespace: konflux-kyverno
         server: '{{server}}'

diff --git a/components/kyverno/OWNERS b/components/kyverno/OWNERS
@@ -0,0 +1,11 @@
+# See the OWNERS docs: https://go.k8s.io/owners
+
+approvers:
+- dperaza4dustbit
+- filariow
+- sadlerap
+
+reviewers:
+- dperaza4dustbit
+- filariow
+- sadlerap
diff --git a/components/kyverno/staging/kyverno-values.yaml b/components/kyverno/staging/kyverno-values.yaml
@@ -0,0 +1,10 @@
+admissionController:
+  replicas: 3
+backgroundController:
+  replicas: 3
+cleanupController:
+  replicas: 3
+reportsController:
+  replicas: 3
+policyReportsCleanup:
+  securityContext: null