details

cluster-resources/policies/default-blocker.yaml

@@ -15,17 +15,20 @@ spec:
   background: true
   rules:
   - name: enforce-namespace
+    skipBackgroundRequests: true
     match:
       any:
       - resources:
           kinds:
           - Pod
     validate:
+      allowExistingViolations: false
       message: Using 'default' namespace is not allowed.
       pattern:
         metadata:
           namespace: "!default"
   - name: enforce-podcontroller-namespace
+    skipBackgroundRequests: true
     match:
       any:
       - resources:
@@ -35,6 +38,7 @@ spec:
           - Job
           - StatefulSet
     validate:
+      allowExistingViolations: false
       message: Using 'default' namespace is not allowed for pod controllers.
       pattern:
         metadata: