diff --git a/deny-external-services/constraint-template.yml b/deny-external-services/constraint-template.yml
index 1906281..5162e73 100644
--- a/deny-external-services/constraint-template.yml
+++ b/deny-external-services/constraint-template.yml
@@ -1,12 +1,16 @@
 apiVersion: templates.gatekeeper.sh/v1
 kind: ConstraintTemplate
 metadata:
-  name: k8sdeniedservicetypes
+  annotations:
+    description: Denies NodePort, LoadBalancer service types, spec.externalIP field
+    metadata.gatekeeper.sh/title: Allowed service types
+    metadata.gatekeeper.sh/version: 1.0.0
+  name: d8deniedservicetypes
 spec:
   crd:
     spec:
       names:
-        kind: K8sDeniedServiceTypes
+        kind: D8DeniedServiceTypes
       validation:
         openAPIV3Schema:
           type: object
diff --git a/deny-external-services/deny-external-services.yml b/deny-external-services/deny-external-services.yml
index efb468e..b94ea48 100644
--- a/deny-external-services/deny-external-services.yml
+++ b/deny-external-services/deny-external-services.yml
@@ -1,8 +1,9 @@
 apiVersion: constraints.gatekeeper.sh/v1beta1
-kind: K8sDeniedServiceTypes
+kind: D8DeniedServiceTypes
 metadata:
   name: deny-nodeport-loadbalancer-externalips-services
 spec:
+  enforcementAction: deny
   match:
     kinds:
       - apiGroups: [""]