komehdaht/manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

D8

Browse Source
This commit is contained in:
Ruslan Piatrovich
2024-08-16 13:50:35 +03:00
parent cd482a4c68
commit 14cbe0fed7
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deny-external-services/constraint-template.yml
+6 -2
View File
@@ -1,12 +1,16 @@
apiVersion: templates.gatekeeper.sh/v1 apiVersion: templates.gatekeeper.sh/v1
kind: ConstraintTemplate kind: ConstraintTemplate
metadata: metadata:
name: k8sdeniedservicetypes annotations:
description: Denies NodePort, LoadBalancer service types, spec.externalIP field
metadata.gatekeeper.sh/title: Allowed service types
metadata.gatekeeper.sh/version: 1.0.0
name: d8deniedservicetypes
spec: spec:
crd: crd:
spec: spec:
names: names:
kind: K8sDeniedServiceTypes kind: D8DeniedServiceTypes
validation: validation:
openAPIV3Schema: openAPIV3Schema:
type: object type: object
deny-external-services/deny-external-services.yml
+2 -1
View File
@@ -1,8 +1,9 @@
apiVersion: constraints.gatekeeper.sh/v1beta1 apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sDeniedServiceTypes kind: D8DeniedServiceTypes
metadata: metadata:
name: deny-nodeport-loadbalancer-externalips-services name: deny-nodeport-loadbalancer-externalips-services
spec: spec:
enforcementAction: deny
match: match:
kinds: kinds:
- apiGroups: [""] - apiGroups: [""]