add tekton

Signed-off-by: gwg313 <gwg313@pm.me>

platform/kyverno/policies/disallow-latest-tag.yaml

@@ -12,6 +12,17 @@ spec:
           - resources:
               kinds:
                 - Pod
+      exclude:
+        any:
+          - resources:
+              selector:
+                matchExpressions:
+                  - key: app.kubernetes.io/managed-by
+                    operator: In
+                    values:
+                      - tekton-pipelines
+                  - key: tekton.dev/task
+                    operator: Exists
       validate:
         message: "Using the 'latest' tag or omitting image tags is forbidden. Use a specific version semantic tag."
         foreach:

platform/kyverno/policies/generate-ns-network-baseline.yaml

@@ -30,6 +30,8 @@ spec:
                 - sealed-secrets
                 - nfs-subdir-external-provisioner
                 - monitoring
+                - tekton-pipelines-resolvers
+                - tekton-pipelines
       generate:
         apiVersion: cilium.io/v2
         kind: CiliumNetworkPolicy

platform/kyverno/policies/require-requests-limits.yaml

@@ -34,6 +34,8 @@ spec:
                 - sealed-secrets
                 - nfs-subdir-external-provisioner
                 - monitoring
+                - tekton-pipelines-resolvers
+                - tekton-pipelines
       validate:
         message: "Resource discipline violation: Containers must declare cpu/memory requests and limits."
         pattern: