Squashed 'cluster-config/' content from commit 654f2390

git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c

components/kyverno-acm/base/generate/security-policyGenerator.yaml

@@ -0,0 +1,42 @@
+apiVersion: policy.open-cluster-management.io/v1
+kind: PolicyGenerator
+metadata:
+  name: kyverno-security
+placementBindingDefaults:
+  name: kyverno-security
+policyDefaults:
+  policyAnnotations: {"policy.open-cluster-management.io/disable-templates": "true"}
+  categories:
+    - CM Configuration Management
+  controls:
+    - CM-2 Baseline Configuration
+  namespace: kyverno-policies
+  remediationAction: enforce
+  severity: medium
+  policySets:
+    - kyverno-security
+  standards:
+    - generic
+  generatePlacementWhenInSet: false
+policies:
+- name: disallow-scc-anyuid
+  categories:
+    - setup
+  controls:
+    - setup
+  disabled: false
+  manifests:
+    - path: policies/disallow-anyuid-scc-policy.yaml
+- name: require-tls-routes
+  categories:
+    - setup
+  controls:
+    - setup
+  disabled: false
+  manifests:
+    - path: policies/require-tls-routes.yaml
+policySets:
+  - description: Kyverno Security
+    name: kyverno-security
+    placement:
+      placementRuleName: kyverno