deny external services

2024-08-08 16:04:47 +03:00
parent 8eaa7aa47b
commit cd482a4c68
2 changed files with 58 additions and 0 deletions
@@ -0,0 +1,13 @@
+apiVersion: constraints.gatekeeper.sh/v1beta1
+kind: K8sDeniedServiceTypes
+metadata:
+  name: deny-nodeport-loadbalancer-externalips-services
+spec:
+  match:
+    kinds:
+      - apiGroups: [""]
+        kinds: ["Service"]
+  parameters:
+    deniedTypes:
+      - "NodePort"
+      - "LoadBalancer"