📝 Add Kyverno install chapter

k8s/M6-kyverno-enforce-service-account.yaml

@@ -10,10 +10,6 @@ spec:
         resources:
           namespaces:
             - flux-system
-            - ingress-nginx
-            - kyverno
-            - monitoring
-            - openebs
       match:
         resources:
           kinds:
@@ -29,6 +25,10 @@ spec:
         resources:
           namespaces:
             - flux-system
+            - ingress-nginx
+            - kyverno
+            - monitoring
+            - openebs
       match:
         resources:
           kinds:
@@ -50,6 +50,10 @@ spec:
         resources:
           namespaces:
             - flux-system
+            - ingress-nginx
+            - kyverno
+            - monitoring
+            - openebs
       match:
         resources:
           kinds:

slides/k8s/M6-kyverno-install.md

@@ -109,6 +109,15 @@ class: pic
 
 ![Running Mario](images/M6-running-Mario.gif)
 
+---
+
+### Debugging
+
+`Kyverno-policies` `Kustomization` failed because `spec.dependsOn` property can only target a resource from the same `Kind`.
+
+- Let's suppress the `spec.dependsOn` property.
+
+Now `Kustomizations` for **_🎸ROCKY_** and **_🎬MOVY_** tenants failed because of our policies.
 
 ---