From 12e0b0cfcfc6ac556a16378084c29439b4d4edf0 Mon Sep 17 00:00:00 2001
From: Stefan Reimer <stefan@zero-downtime.net>
Date: Wed, 4 Jun 2025 10:41:50 +0000
Subject: [PATCH] feat: base policy integration into kubezero platform

---
 charts/kubezero/templates/network.yaml | 6 ------
 charts/kubezero/templates/policy.yaml  | 9 +++++++++
 charts/kubezero/values.yaml            | 4 ++++
 3 files changed, 13 insertions(+), 6 deletions(-)
 create mode 100644 charts/kubezero/templates/policy.yaml

diff --git a/charts/kubezero/templates/network.yaml b/charts/kubezero/templates/network.yaml
index 7587eeec..27db4c5f 100644
--- a/charts/kubezero/templates/network.yaml
+++ b/charts/kubezero/templates/network.yaml
@@ -41,12 +41,6 @@ haproxy:
 
 
 {{- define "network-argo" }}
-  # Metallb
-  ignoreDifferences:
-  - group: apiextensions.k8s.io
-    kind: CustomResourceDefinition
-    jsonPointers:
-    - /spec/conversion/webhook/clientConfig/caBundle
 {{- end }}
 
 {{ include "kubezero-app.app" . }}
diff --git a/charts/kubezero/templates/policy.yaml b/charts/kubezero/templates/policy.yaml
new file mode 100644
index 00000000..6ed4c93f
--- /dev/null
+++ b/charts/kubezero/templates/policy.yaml
@@ -0,0 +1,9 @@
+{{- define "policy-values" }}
+kyverno:
+  test: true
+{{- end }}
+
+{{- define "policy-argo" }}
+{{- end }}
+
+{{ include "kubezero-app.app" . }}
diff --git a/charts/kubezero/values.yaml b/charts/kubezero/values.yaml
index a2287317..9e1bc0bb 100644
--- a/charts/kubezero/values.yaml
+++ b/charts/kubezero/values.yaml
@@ -30,6 +30,10 @@ addons:
   aws-eks-asg-rolling-update-handler:
     enabled: false
 
+policy:
+  enabled: false
+  targetRevision: 0.1.0
+
 network:
   enabled: true
   retain: true