Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

cluster-config/components/kyverno-acm/base/generate/security-policyGenerator.yaml

@@ -0,0 +1,42 @@
+apiVersion: policy.open-cluster-management.io/v1
+kind: PolicyGenerator
+metadata:
+  name: kyverno-security
+placementBindingDefaults:
+  name: kyverno-security
+policyDefaults:
+  policyAnnotations: {"policy.open-cluster-management.io/disable-templates": "true"}
+  categories:
+    - CM Configuration Management
+  controls:
+    - CM-2 Baseline Configuration
+  namespace: kyverno-policies
+  remediationAction: enforce
+  severity: medium
+  policySets:
+    - kyverno-security
+  standards:
+    - generic
+  generatePlacementWhenInSet: false
+policies:
+- name: disallow-scc-anyuid
+  categories:
+    - setup
+  controls:
+    - setup
+  disabled: false
+  manifests:
+    - path: policies/disallow-anyuid-scc-policy.yaml
+- name: require-tls-routes
+  categories:
+    - setup
+  controls:
+    - setup
+  disabled: false
+  manifests:
+    - path: policies/require-tls-routes.yaml
+policySets:
+  - description: Kyverno Security
+    name: kyverno-security
+    placement:
+      placementRuleName: kyverno