Giant Swarm offers a kyverno App which can be installed in workload clusters.
Kyverno is an admission controller which offers policy enforcement as a validating or mutating webhook.
Here we define the kyverno chart with its templates and default configuration.
There are 3 ways to install this app onto a workload cluster.
- Using our web interface
- Using our API
- Directly creating the App custom resource on the management cluster.
Please see the below page for configurable values. Kyverno Configuration
See our full reference page on how to configure applications for more details.