fix: add kyverno secret policies for sorcerer

2024-11-25 13:17:49 +01:00
parent c520f042c6
commit a2203fc1d7
2 changed files with 37 additions and 3 deletions
@@ -18,15 +18,17 @@ spec:
        namespace: sorcerer
      kind: Secret
      name: azure-keyvault
-      namespace: '{{request.object.metadata.name}}'
+      namespace: '{{request.object.metadata.namespace}}'
      synchronize: true
    match:
      any:
      - resources:
          kinds:
-          - Namespace
+          - Secret
          names:
-          - "*-sorcerer"
+          - azure-keyvault
+          annotations:
+            kyverno/clone: "true"
    name: sync-keyvault-secrets