https://github.com/upbound/controller-kyverno
Upbound controller for kyverno
https://github.com/upbound/controller-kyverno
Last synced: 3 months ago
JSON representation
Upbound controller for kyverno
- Host: GitHub
- URL: https://github.com/upbound/controller-kyverno
- Owner: upbound
- Created: 2025-06-11T13:43:51.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-08-12T17:18:05.000Z (11 months ago)
- Last Synced: 2025-08-12T19:18:51.096Z (11 months ago)
- Language: Shell
- Homepage:
- Size: 9.77 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# controller-kyverno
This repository provides a controller that enables declarative installation of
Kyverno within an Upbound control plane.
## Overview
Kyverno is a cloud native policy engine.
## Usage
### Prerequisites
- Upbound account with appropriate permissions
- kubectl CLI installed and configured
- Upbound CLI (`up`) installed
### Installation
1. Create a control plane in Upbound
```bash
UPBOUND_ORG="your_upbound_org"
# Other spaces are available, check with `up ctx`
# you need a space with enabled controller feature
UPBOUND_SPACE="space-the-final-frontier"
UPBOUND_GROUP="your_group_name"
UPBOUND_CTP="your_controlplane_name"
# Create Profile
up profile create $UPBOUND_ORG --organization $UPBOUND_ORG
up profile use $UPBOUND_ORG
# Login and switch context
up login -a $UPBOUND_ORG --profile $UPBOUND_ORG
up ctx "${UPBOUND_ORG}/${UPBOUND_SPACE}"
# Create group
up group create "${UPBOUND_GROUP}"
# Switch context to group
up ctx "${UPBOUND_ORG}/${UPBOUND_SPACE}/${UPBOUND_GROUP}"
# Create control plane
up ctp create "${UPBOUND_CTP}" --crossplane-channel="Rapid"
# Check status of control plane (should show Healthy: True)
up ctp list
# Switch context to control plane (might take a minute to become ready)
up ctx "${UPBOUND_ORG}/${UPBOUND_SPACE}/${UPBOUND_GROUP}/${UPBOUND_CTP}"
```
2. Install the controller:
*This installs the controller package into your control plane, which includes the manifests required to run Kyverno.*
```bash
UP_CHART_VERSION=""
cat <