init
This commit is contained in:
26
talos-k8s-flux/soft/kyverno/policies.yaml
Normal file
26
talos-k8s-flux/soft/kyverno/policies.yaml
Normal file
@@ -0,0 +1,26 @@
|
||||
apiVersion: kyverno.io/v1
|
||||
kind: Policy
|
||||
metadata:
|
||||
name: require-labels
|
||||
namespace: kyverno
|
||||
annotations:
|
||||
meta.helm.sh/release-name: kyverno
|
||||
meta.helm.sh/release-namespace: flux-system
|
||||
labels:
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
spec:
|
||||
validationFailureAction: audit
|
||||
background: true
|
||||
rules:
|
||||
- name: require-labels
|
||||
match:
|
||||
any:
|
||||
- resources:
|
||||
kinds:
|
||||
- Pod
|
||||
validate:
|
||||
message: "Label 'app.kubernetes.io/name' is required"
|
||||
pattern:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/name: "?*"
|
Reference in New Issue
Block a user