21 lines
477 B
YAML
21 lines
477 B
YAML
apiVersion: constraints.gatekeeper.sh/v1beta1
|
|
kind: D8DeniedServiceTypes
|
|
metadata:
|
|
name: deny-nodeport-loadbalancer-externalips-services
|
|
spec:
|
|
enforcementAction: deny
|
|
match:
|
|
kinds:
|
|
- apiGroups: [""]
|
|
kinds: ["Service"]
|
|
namespaceSelector:
|
|
matchExpressions:
|
|
- key: "kubernetes.io/metadata.name"
|
|
operator: NotIn
|
|
values:
|
|
- "aqua-test"
|
|
parameters:
|
|
deniedTypes:
|
|
- "NodePort"
|
|
- "LoadBalancer"
|