mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 09:56:55 +00:00
37 lines
770 B
YAML
37 lines
770 B
YAML
|
apiVersion: kyverno.io/v1
|
||
|
kind: ClusterPolicy
|
||
|
metadata:
|
||
|
name: check-old-object
|
||
|
spec:
|
||
|
background: false
|
||
|
rules:
|
||
|
- name: require-labels
|
||
|
match:
|
||
|
all:
|
||
|
- resources:
|
||
|
operations:
|
||
|
- CREATE
|
||
|
- UPDATE
|
||
|
kinds:
|
||
|
- Namespace
|
||
|
context:
|
||
|
- name: small
|
||
|
variable:
|
||
|
value: small
|
||
|
- name: medium
|
||
|
variable:
|
||
|
value: medium
|
||
|
- name: large
|
||
|
variable:
|
||
|
value: large
|
||
|
validate:
|
||
|
failureAction: Enforce
|
||
|
message: "The label `size` is required"
|
||
|
assert:
|
||
|
object:
|
||
|
metadata:
|
||
|
labels:
|
||
|
size:
|
||
|
(@ == $small || @ == $medium || @ == $large): true
|
||
|
|