apiVersion: policy.open-cluster-management.io/v1
kind: PolicyGenerator
metadata:
  name: kyverno-security
placementBindingDefaults:
  name: kyverno-security
policyDefaults:
  policyAnnotations: {"policy.open-cluster-management.io/disable-templates": "true"}
  categories:
    - CM Configuration Management
  controls:
    - CM-2 Baseline Configuration
  namespace: kyverno-policies
  remediationAction: enforce
  severity: medium
  policySets:
    - kyverno-security
  standards:
    - generic
  generatePlacementWhenInSet: false
policies:
- name: disallow-scc-anyuid
  categories:
    - setup
  controls:
    - setup
  disabled: false
  manifests:
    - path: policies/disallow-anyuid-scc-policy.yaml
- name: require-tls-routes
  categories:
    - setup
  controls:
    - setup
  disabled: false
  manifests:
    - path: policies/require-tls-routes.yaml
policySets:
  - description: Kyverno Security
    name: kyverno-security
    placement:
      placementRuleName: kyverno