diff --git a/cluster-resources/policies/deployment-verifier.yaml b/cluster-resources/policies/deployment-verifier.yaml index fba5da9..421faa2 100644 --- a/cluster-resources/policies/deployment-verifier.yaml +++ b/cluster-resources/policies/deployment-verifier.yaml @@ -28,12 +28,9 @@ spec: jmesPath: "@" preconditions: all: - - key: "{{request.object.metadata.ownerReferences || `[]`}}" - operator: NotEquals - value: "[]" - - key: "{{request.object.metadata.ownerReferences[0].kind}}" - operator: Equals - value: ReplicaSet + - key: "{{request.object.metadata.ownerReferences[?kind=='ReplicaSet'] | length(@)}}" + operator: GreaterThanOrEquals + value: 1 validate: message: "Pods must be created through a Deployment resource." deny: