chore: Cleanup old nix code and add helmfile experiments

values/kyverno/kustomize/base/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - _manifest.yaml

values/kyverno/kustomize/default/kustomization.yaml

@@ -0,0 +1,4 @@
+generatorOptions:
+  disableNameSuffixHash: true
+resources:
+  - ../base

values/kyverno/manifests/kyverno.yaml

@@ -0,0 +1,39 @@
+{{- if .Values.clusterConfig.argo.enabled }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kyverno
+  namespace: argocd
+spec:
+  destination:
+    namespace: kyverno
+    server: 'https://kubernetes.default.svc'
+  sources:
+  - repoURL: {{ .Values.clusterConfig.manifests }}
+    targetRevision: HEAD
+    path: helmfiles/kyverno
+    plugin:
+      name: helmfile
+      env:
+      - name: CLUSTER_NAME
+        value: {{ .Values.clusterConfig.cluster }}
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: sys
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      # - ServerSideApply=true
+    {{- if .Values.kyverno.autosync }}
+    automated:
+      prune: true
+      # selfHeal: false
+    {{- end }}
+  ignoreDifferences:
+  - group: batch
+    kind: CronJob
+    jqPathExpressions:
+    - '.spec.jobTemplate.spec.template.spec.containers[]?.resources'
+{{- end }}

values/kyverno/values.yaml.gotmpl

@@ -0,0 +1,11 @@
+kyverno:
+  enabled: true
+  autosync: false
+  metrics: false
+  resources:
+    cleanupController:
+      memory: "128Mi"
+    reportsController:
+      memory: "128Mi"
+    backgroundController:
+      memory: "128Mi"

values/kyverno/values/kyverno.yaml.gotmpl

@@ -0,0 +1,41 @@
+replicaCount: 3
+{{ if .Values.kyverno.metrics }}
+admissionController:
+    serviceMonitor:
+    enabled: true
+    metricsService:
+    create: true
+backgroundController:
+    serviceMonitor:
+    enabled: true
+    metricsService:
+    create: true
+cleanupController:
+    serviceMonitor:
+    enabled: true
+    metricsService:
+    create: true
+reportsController:
+    serviceMonitor:
+    enabled: true
+    metricsService:
+    create: true
+{{ end }}
+cleanupController:
+    resources:
+    limits: 
+        memory: {{ .Values.kyverno.resources.cleanupController.memory }}
+    requests:
+        memory: {{ .Values.kyverno.resources.cleanupController.memory }}
+reportsController:
+    resources:
+    limits: 
+        memory: {{ .Values.kyverno.resources.reportsController.memory }}
+    requests:
+        memory: {{ .Values.kyverno.resources.reportsController.memory }}
+backgroundController:
+    resources:
+    limits: 
+        memory: {{ .Values.kyverno.resources.backgroundController.memory }}
+    requests:
+        memory: {{ .Values.kyverno.resources.backgroundController.memory }}