resource "kubernetes_namespace" "kyverno" {
  metadata {
    name = "kyverno"
  }
}

resource "helm_release" "kyverno" {
  name      = "kyverno"
  namespace = kubernetes_namespace.kyverno.metadata[0].name

  repository = "https://kyverno.github.io/kyverno/"
  chart      = "kyverno"
  version    = "3.3.3"

  values = [yamlencode({
    admissionController = {
      replicas = 1
    }
    backgroundController = {
      replicas = 1
    }
    cleanupController = {
      replicas = 1
    }
    reportsController = {
      replicas = 1
    }
  })]

  wait_for_jobs = true
}