From 0582cd9917599f4434dbbf3a97acda16317f735c Mon Sep 17 00:00:00 2001 From: Danijel Simeunovic Date: Wed, 27 May 2026 22:25:13 +0200 Subject: [PATCH] policy --- cluster-resources/policies/label-checker.yaml | 40 ------------------- 1 file changed, 40 deletions(-) delete mode 100644 cluster-resources/policies/label-checker.yaml diff --git a/cluster-resources/policies/label-checker.yaml b/cluster-resources/policies/label-checker.yaml deleted file mode 100644 index 129007a..0000000 --- a/cluster-resources/policies/label-checker.yaml +++ /dev/null @@ -1,40 +0,0 @@ -apiVersion: kyverno.io/v1 -kind: ClusterPolicy -metadata: - name: require-labels - annotations: - policies.kyverno.io/title: Require Labels - policies.kyverno.io/category: Best Practices - policies.kyverno.io/minversion: 1.6.0 - policies.kyverno.io/severity: medium - policies.kyverno.io/subject: Pod, Label - policies.kyverno.io/description: Define and use labels that identify semantic attributes of your application or Deployment. A common set of labels allows tools to work collaboratively, describing objects in a common manner that all tools can understand. The recommended labels describe applications in a way that can be queried. This policy validates that the label `app.kubernetes.io/name` is specified with some value. -spec: - validationFailureAction: Audit - background: true - rules: - - name: check-for-labels - skipBackgroundRequests: true - exclude: - any: - - resources: - namespaces: - - kube-system - - istio-system - - argocd - - cert-manager - - monitoring - - secrets - - kyverno - match: - any: - - resources: - kinds: - - Pod - validate: - message: The label `app.kubernetes.io/name` is required. - allowExistingViolations: true - pattern: - metadata: - labels: - app.kubernetes.io/name: "?*"