apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - disallow-host-namespace.yaml - disallow-hostpath-volumes.yaml - disallow-latest-tag.yaml - disallow-privileged-containers.yaml commonLabels: app.kubernetes.io/part-of: kyverno-policies policy-tier: disallow commonAnnotations: argocd.argoproj.io/sync-wave: "2"