Forte/launchpad
6
0
Fork 0
Code Issues Pull Requests Actions Packages Wiki Activity

sync

Browse Source
This commit is contained in:
Danijel Simeunovic
2026-02-27 14:12:09 +01:00
parent e7168373aa
commit edd468e239
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cluster-resources/policies/deployment-verifier.yaml
View File

@@ -26,6 +26,7 @@ spec:
context: context:
- name: ownerReplicaSet - name: ownerReplicaSet
apiCall: apiCall:
method: GET
urlPath: "/apis/apps/v1/namespaces/{{request.namespace}}/replicasets/{{request.object.metadata.ownerReferences[0].name}}" urlPath: "/apis/apps/v1/namespaces/{{request.namespace}}/replicasets/{{request.object.metadata.ownerReferences[0].name}}"
jmesPath: "@" jmesPath: "@"
preconditions: preconditions:
@@ -34,6 +35,7 @@ spec:
operator: GreaterThanOrEquals operator: GreaterThanOrEquals
value: 1 value: 1
validate: validate:
allowExistingViolations: true
message: "Pods must be created through a Deployment resource." message: "Pods must be created through a Deployment resource."
deny: deny:
conditions: conditions:
@@ -59,6 +61,7 @@ spec:
- traefik-system - traefik-system
skipBackgroundRequests: true skipBackgroundRequests: true
validate: validate:
allowExistingViolations: true
message: "Direct pod creation is not allowed. Pods must come from a Deployment managed by ArgoCD." message: "Direct pod creation is not allowed. Pods must come from a Deployment managed by ArgoCD."
deny: deny:
conditions: conditions: