add kyverno policies

Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-27 19:23:54 -04:00 · 2026-05-27 19:23:54 -04:00 · baa0216960
commit baa0216960
parent 4be877e419
35 changed files with 843 additions and 39 deletions
--- a/platform/kyverno/policies/50-cleanup/cleanup-evicted-pods.yaml
+++ b/platform/kyverno/policies/50-cleanup/cleanup-evicted-pods.yaml
@ -0,0 +1,22 @@
+apiVersion: kyverno.io/v2beta1
+kind: ClusterCleanupPolicy
+metadata:
+  name: cleanup-evicted-pods
+spec:
+  match:
+    any:
+      - resources:
+          kinds:
+            - Pod
+
+  conditions:
+    all:
+      - key: "{{ target.status.reason }}"
+        operator: Equals
+        value: Evicted
+
+      - key: "{{ time_diff('{{ target.metadata.creationTimestamp }}','{{ time_now_utc() }}') }}"
+        operator: GreaterThan
+        value: 1h
+
+  schedule: "0 * * * *"