Files
manifests/deny-external-services/deny-external-services.yml
T

14 lines
290 B
YAML

apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sDeniedServiceTypes
metadata:
name: deny-nodeport-loadbalancer-externalips-services
spec:
match:
kinds:
- apiGroups: [""]
kinds: ["Service"]
parameters:
deniedTypes:
- "NodePort"
- "LoadBalancer"