This commit is contained in:
Danijel Simeunovic
2026-03-06 09:44:29 +01:00
parent fdd013c1c8
commit e1ee176277

View File

@@ -15,17 +15,20 @@ spec:
background: true background: true
rules: rules:
- name: enforce-namespace - name: enforce-namespace
skipBackgroundRequests: true
match: match:
any: any:
- resources: - resources:
kinds: kinds:
- Pod - Pod
validate: validate:
allowExistingViolations: false
message: Using 'default' namespace is not allowed. message: Using 'default' namespace is not allowed.
pattern: pattern:
metadata: metadata:
namespace: "!default" namespace: "!default"
- name: enforce-podcontroller-namespace - name: enforce-podcontroller-namespace
skipBackgroundRequests: true
match: match:
any: any:
- resources: - resources:
@@ -35,6 +38,7 @@ spec:
- Job - Job
- StatefulSet - StatefulSet
validate: validate:
allowExistingViolations: false
message: Using 'default' namespace is not allowed for pod controllers. message: Using 'default' namespace is not allowed for pod controllers.
pattern: pattern:
metadata: metadata: