From a81a8c339fdc1ecce5cafe579d5c4640375f35a6 Mon Sep 17 00:00:00 2001 From: Ruslan Piatrovich Date: Wed, 18 Sep 2024 21:27:23 +0300 Subject: [PATCH] ns for deny service --- deny-external-services/deny-external-services.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/deny-external-services/deny-external-services.yml b/deny-external-services/deny-external-services.yml index b94ea48..7991b59 100644 --- a/deny-external-services/deny-external-services.yml +++ b/deny-external-services/deny-external-services.yml @@ -8,6 +8,12 @@ spec: kinds: - apiGroups: [""] kinds: ["Service"] + namespaceSelector: + matchExpressions: + - key: "kubernetes.io/metadata.name" + operator: NotIn + values: + - "aqua-test" parameters: deniedTypes: - "NodePort"