Kyverno Policies

Description

# Kyverno Policies Skill — KubeAuto Day IDP This skill encodes correct patterns for Kyverno 1.17+ policy authoring. The critical constraint: enforce mode ONLY in the `apps` namespace. All system namespaces must be excluded to prevent policies from blocking platform components (ArgoCD, Prometheus, Kyverno itself, etc.). --- ## Correct Patterns ### Namespace Exclusion Strategy Every ClusterPolicy MUST exclude system namespaces. Kyverno 1.17+ supports namespace selectors and explicit exclusion

Installation

Installs to ~/.claude/skills/peopleforrester-kubeauto-ai-day-kyverno-policies/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.