details
This commit is contained in:
@@ -15,17 +15,20 @@ spec:
|
|||||||
background: true
|
background: true
|
||||||
rules:
|
rules:
|
||||||
- name: enforce-namespace
|
- name: enforce-namespace
|
||||||
|
skipBackgroundRequests: true
|
||||||
match:
|
match:
|
||||||
any:
|
any:
|
||||||
- resources:
|
- resources:
|
||||||
kinds:
|
kinds:
|
||||||
- Pod
|
- Pod
|
||||||
validate:
|
validate:
|
||||||
|
allowExistingViolations: false
|
||||||
message: Using 'default' namespace is not allowed.
|
message: Using 'default' namespace is not allowed.
|
||||||
pattern:
|
pattern:
|
||||||
metadata:
|
metadata:
|
||||||
namespace: "!default"
|
namespace: "!default"
|
||||||
- name: enforce-podcontroller-namespace
|
- name: enforce-podcontroller-namespace
|
||||||
|
skipBackgroundRequests: true
|
||||||
match:
|
match:
|
||||||
any:
|
any:
|
||||||
- resources:
|
- resources:
|
||||||
@@ -35,6 +38,7 @@ spec:
|
|||||||
- Job
|
- Job
|
||||||
- StatefulSet
|
- StatefulSet
|
||||||
validate:
|
validate:
|
||||||
|
allowExistingViolations: false
|
||||||
message: Using 'default' namespace is not allowed for pod controllers.
|
message: Using 'default' namespace is not allowed for pod controllers.
|
||||||
pattern:
|
pattern:
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
Reference in New Issue
Block a user