This commit is contained in:
Ruslan Piatrovich
2024-08-16 13:50:35 +03:00
parent cd482a4c68
commit 14cbe0fed7
2 changed files with 8 additions and 3 deletions
@@ -1,12 +1,16 @@
apiVersion: templates.gatekeeper.sh/v1
kind: ConstraintTemplate
metadata:
name: k8sdeniedservicetypes
annotations:
description: Denies NodePort, LoadBalancer service types, spec.externalIP field
metadata.gatekeeper.sh/title: Allowed service types
metadata.gatekeeper.sh/version: 1.0.0
name: d8deniedservicetypes
spec:
crd:
spec:
names:
kind: K8sDeniedServiceTypes
kind: D8DeniedServiceTypes
validation:
openAPIV3Schema:
type: object
@@ -1,8 +1,9 @@
apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sDeniedServiceTypes
kind: D8DeniedServiceTypes
metadata:
name: deny-nodeport-loadbalancer-externalips-services
spec:
enforcementAction: deny
match:
kinds:
- apiGroups: [""]