Delete placementrule and placementbinding under configurationPolicy

Signed-off-by: yiraeChristineKim <[email protected]>
stolostron · Aug 26, 2024 · 4e75f58 · 4e75f58
1 parent 2181107
commit 4e75f58
Show file tree

Hide file tree

Showing 6 changed files with 87 additions and 381 deletions.
diff --git a/community/CM-Configuration-Management/policy-argocd-kubernetes.yaml b/community/CM-Configuration-Management/policy-argocd-kubernetes.yaml
@@ -57,23 +57,6 @@ spec:
                   packageOverrides:
                     - packageAlias: argo-cd
                       packageName: argo-cd
-                  placement:
-                    placementRef:
-                      name: helmchartargo-placement-1
-                      kind: PlacementRule
-            - complianceType: musthave
-              objectDefinition:
-                apiVersion: apps.open-cluster-management.io/v1
-                kind: PlacementRule
-                metadata:
-                  name: helmchartargo-placement-1
-                  namespace: argocd
-                  labels:
-                    app: helmchartargo
-                spec:
-                  clusterSelector:
-                    matchLabels:
-                      environment: dev
             - complianceType: musthave
               objectDefinition:
                 apiVersion: apps.open-cluster-management.io/v1
@@ -86,28 +69,3 @@ spec:
                 spec:
                   pathname: https://charts.wener.tech
                   type: HelmRepo
----
-apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: binding-argocd-kubernetes
-placementRef:
-  name: placement-argocd-kubernetes
-  kind: PlacementRule
-  apiGroup: apps.open-cluster-management.io
-subjects:
-  - name: policy-argocd-kubernetes
-    kind: Policy
-    apiGroup: policy.open-cluster-management.io
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: placement-argocd-kubernetes
-spec:
-  clusterSelector:
-    matchExpressions:
-      - key: local-cluster
-        operator: In
-        values:
-          - 'true'
diff --git a/community/CM-Configuration-Management/policy-install-external-secrets.yaml b/community/CM-Configuration-Management/policy-install-external-secrets.yaml
@@ -99,53 +99,5 @@ spec:
                   packageOverrides:
                     - packageAlias: kubernetes-external-secrets
                       packageName: kubernetes-external-secrets
-                  placement:
-                    placementRef:
-                      kind: PlacementRule
-                      name: external-secrets-placement
           remediationAction: enforce
           severity: low
-    - objectDefinition:
-        apiVersion: policy.open-cluster-management.io/v1
-        kind: ConfigurationPolicy
-        metadata:
-          name: external-secrets-replication-placement
-        spec:
-          object-templates:
-            - complianceType: musthave
-              objectDefinition:
-                apiVersion: apps.open-cluster-management.io/v1
-                kind: PlacementRule
-                metadata:
-                  name: external-secrets-placement
-                  namespace: external-secrets-system
-                  labels:
-                    app: external-secrets
-                spec:
-                  clusterSelector:
-                    matchLabels:
-                      environment: dev
-          remediationAction: enforce
-          severity: high
----
-apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: binding-external-secrets-policy-app
-placementRef:
-  apiGroup: apps.open-cluster-management.io
-  kind: PlacementRule
-  name: placement-external-secrets-policy-app
-subjects:
-  - apiGroup: policy.open-cluster-management.io
-    kind: Policy
-    name: external-secrets-policy
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: placement-external-secrets-policy-app
-spec:
-  clusterSelector:
-    matchLabels:
-      name: local-cluster
diff --git a/community/CM-Configuration-Management/policy-install-kyverno.yaml b/community/CM-Configuration-Management/policy-install-kyverno.yaml
@@ -110,23 +110,6 @@ spec:
                               initialDelaySeconds: 35
                               periodSeconds: 20
                             securityContext: null
-                  placement:
-                    placementRef:
-                      name: kyverno-placement-1
-                      kind: PlacementRule
-            - complianceType: mustonlyhave
-              objectDefinition:
-                apiVersion: apps.open-cluster-management.io/v1
-                kind: PlacementRule
-                metadata:
-                  name: kyverno-placement-1
-                  namespace: kyverno
-                  labels:
-                    app: kyverno
-                spec:
-                  clusterSelector:
-                    matchLabels:
-                      environment: dev
             - complianceType: musthave
               objectDefinition:
                 apiVersion: apps.open-cluster-management.io/v1
@@ -139,28 +122,3 @@ spec:
                 spec:
                   pathname: https://kyverno.github.io/kyverno
                   type: HelmRepo
----
-apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: binding-policy-install-kyverno
-placementRef:
-  name: placement-policy-install-kyverno
-  kind: PlacementRule
-  apiGroup: apps.open-cluster-management.io
-subjects:
-  - name: policy-install-kyverno
-    kind: Policy
-    apiGroup: policy.open-cluster-management.io
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: placement-policy-install-kyverno
-spec:
-  clusterSelector:
-    matchExpressions:
-      - key: local-cluster
-        operator: In
-        values:
-          - 'true'
diff --git a/...ity/CM-Configuration-Management/policy-install-triliovault-for-kubernetes-using-helm.yaml b/...ity/CM-Configuration-Management/policy-install-triliovault-for-kubernetes-using-helm.yaml
@@ -1,16 +1,16 @@
-# This policy deploys Triliovault for Kubernetes (TVK) to all non-OpenShift clusters 
+# This policy deploys Triliovault for Kubernetes (TVK) to all non-OpenShift clusters
 # with a label "protected-by=triliovault" using Helm. To deploy a basic (trial) license,
-# use the policy to deploy license for Triliovault for Kubernetes available at 
-# ./CM-Configuration-Management/policy-create-license-triliovault-for-kubernetes-upstream.yaml.  
+# use the policy to deploy license for Triliovault for Kubernetes available at
+# ./CM-Configuration-Management/policy-create-license-triliovault-for-kubernetes-upstream.yaml.
 # Please conact [email protected] for further support.
 #
-# You must make sure the PlacementRule for the Policy installs the policy on the
-# ACM hub. The PlacementRule inside the Policy is what determines which clusters
+# You must make sure the Placement for the Policy installs the policy on the
+# ACM hub. The Placement inside the Policy is what determines which clusters
 # TVK will be installed on.
 #
 # Note that it is set to enforce by default.
 #
-# Please refer product documentation at https://docs.trilio.io/kubernetes/overview/readme 
+# Please refer product documentation at https://docs.trilio.io/kubernetes/overview/readme
 apiVersion: policy.open-cluster-management.io/v1
 kind: Policy
 metadata:
@@ -59,7 +59,7 @@ spec:
         metadata:
           name: policy-tvk-application
         spec:
-          remediationAction: enforce 
+          remediationAction: enforce
           severity: high
           object-templates:
             - complianceType: musthave
@@ -99,7 +99,7 @@ spec:
                   name: hchartsk8strilionet-trilio-chart
                   namespace: hchartsk8strilionet-trilio-chart-ns
                 spec:
-                  pathname: 'https://charts.k8strilio.net/trilio-stable/k8s-triliovault-operator'
+                  pathname: "https://charts.k8strilio.net/trilio-stable/k8s-triliovault-operator"
                   type: HelmRepo
     - objectDefinition:
         apiVersion: policy.open-cluster-management.io/v1
@@ -125,63 +125,5 @@ spec:
                   name: k8s-triliovault-operator
                   channel: hchartsk8strilionet-trilio-chart-ns/hchartsk8strilionet-trilio-chart
                   packageOverrides:
-                  - packageName: k8s-triliovault-operator
-                    packageAlias: k8s-triliovault-operator
-                  placement:
-                    placementRef:
-                      name: placement-policy-tvk-1
-                      kind: PlacementRule
-    - objectDefinition:
-        apiVersion: policy.open-cluster-management.io/v1
-        kind: ConfigurationPolicy
-        metadata:
-          name: policy-tvk-placement
-        spec:
-          remediationAction: enforce
-          severity: high
-          object-templates:
-            - complianceType: musthave
-              objectDefinition:
-                apiVersion: apps.open-cluster-management.io/v1
-                kind: PlacementRule
-                metadata:
-                  name: placement-policy-tvk-1
-                  namespace: trilio-system
-                  labels:
-                    app: tvk
-                spec:
-                  clusterSelector:
-                    matchExpressions:
-                      - key: vendor
-                        operator: NotIn
-                        values:
-                          - OpenShift
-                      - key: protected-by
-                        operator: In
-                        values:
-                          - triliovault
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: install-tvk-placement
-spec:
-  clusterSelector:
-    matchExpressions:
-      - key: name
-        operator: In
-        values:
-          - local-cluster
----
-apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: install-tvk-placement
-placementRef:
-  name: install-tvk-placement
-  apiGroup: apps.open-cluster-management.io
-  kind: PlacementRule
-subjects:
-  - name: install-tvk-helm
-    apiGroup: policy.open-cluster-management.io
-    kind: Policy
+                    - packageName: k8s-triliovault-operator
+                      packageAlias: k8s-triliovault-operator
diff --git a/community/CM-Configuration-Management/policy-sriovnetwork-templatized.yaml b/community/CM-Configuration-Management/policy-sriovnetwork-templatized.yaml
@@ -38,31 +38,6 @@ spec:
                   vlan: '{{hub fromConfigMap "" "site-config"  (printf "%s-vlan" .ManagedClusterName) | toInt hub}}'
 ---
 apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: binding-policy-site-nw-templatized-common
-placementRef:
-  name: placement-policy-site-nw-templatized-common
-  kind: PlacementRule
-  apiGroup: apps.open-cluster-management.io
-subjects:
-  - name: policy-site-nw-templatized
-    kind: Policy
-    apiGroup: policy.open-cluster-management.io
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: placement-policy-site-nw-templatized-common
-spec:
-  clusterSelector:
-    matchExpressions:
-      - key: local-cluster
-        operator: In
-        values:
-          - 'true'
----
-apiVersion: policy.open-cluster-management.io/v1
 kind: Policy
 metadata:
   name: policy-site-nw-templatized-config
@@ -99,30 +74,4 @@ spec:
                   cluster0002-phc2sysOpts: "-a -r -n 24"
                   cluster0002-resourceName: "du_mh"
                   cluster0002-vlan: "3621"
----
-apiVersion: policy.open-cluster-management.io/v1
-kind: PlacementBinding
-metadata:
-  name: binding-policy-site-nw-templatized-config
-placementRef:
-  name: placement-policy-site-nw-templatized-config
-  kind: PlacementRule
-  apiGroup: apps.open-cluster-management.io
-subjects:
-  - name: policy-site-nw-templatized-config
-    kind: Policy
-    apiGroup: policy.open-cluster-management.io
----
-apiVersion: apps.open-cluster-management.io/v1
-kind: PlacementRule
-metadata:
-  name: placement-policy-site-nw-templatized-config
-spec:
-  clusterSelector:
-    matchExpressions:
-      - key: local-cluster
-        operator: In
-        values:
-          - 'true'
----