diff --git a/charts/openebs/templates/kyverno/README.md b/charts/openebs/templates/kyverno/README.md new file mode 100644 index 00000000..83eccb84 --- /dev/null +++ b/charts/openebs/templates/kyverno/README.md @@ -0,0 +1,19 @@ +## Kyverno Policy Integration + +PodSecurityPolicy(PSP) is being deprecated in Kubernetes v1.21 and will be removed in v1.25. So, the suitable alternative is Kyverno. + +Kyverno Logo + +Kyverno is an Open source policy engine designed specifically for Kubernetes. The word "Kyverno" is a Greek word for "Govern". It was originally developed by Nirmata and is now a CNCF sandbox project. It can validate, mutate, and generate configurations using admission controls and background scans. + +### Installation + +1.Install kyverno via [Helm](https://kyverno.io/docs/installation/#install-kyverno-using-helm) or [YAMLs](https://kyverno.io/docs/installation/#install-kyverno-using-yamls) in Kubernetes cluster. + +2.After that install kyverno policies with OpenEBS using flag 'rbac.kyvernoEnabled=true'. + +`helm install openebs openebs/openebs --namespace openebs --create-namespace --set legacy.enabled=false --set cstor.enabled=true --set openebs-ndm.enabled=true` + +3.Check the list of policies which has been created by using. + +`kubectl get pol` \ No newline at end of file