feat: kyverno-based cc_init_data injection for OSC 1.12#77

Merged

butler54 merged 12 commits intovalidatedpatterns:mainfrom

butler54:feature/kyverno-initdata

Apr 22, 2026

Commits on Apr 20, 2026

feat!: add Kyverno-based cc_init_data injection for OSC 1.12 / Trustee 1.1

butler54
and
claude
committed
chore: point trustee app to feature branch for testing

butler54
and
claude
committed

Commits on Apr 21, 2026

fix: differentiate kata vs kata-cc runtime classes by platform

butler54
and
claude
committed
fix: exclude policyreport CRDs from Kyverno to avoid ACM conflict

butler54
and
claude
committed
fix: disable Kyverno reportsController to match disabled policyreport CRDs

butler54
and
claude
committed
feat: convert bare Pods to Deployments, retarget Kyverno to Deployments

butler54
and
claude
committed
fix: remove fixed runAsUser from hello-openshift Deployments

butler54
and
claude
committed
fix: switch initdata injection from MutatingPolicy to ClusterPolicy

butler54
and
claude
committed
fix: use kata-remote runtime class for cloud peer-pods

butler54
and
claude
committed
fix: minor fixes
butler54
committed
fix: point insecure-policy deployment to debug-initdata

butler54
and
claude
committed

Commits on Apr 22, 2026

fix: use released trustee chart v0.3.* instead of git branch

butler54
and
claude
committed