mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-07 00:17:13 +00:00
126 lines
3.8 KiB
YAML
126 lines
3.8 KiB
YAML
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||
|
kind: CustomResourceDefinition
|
||
|
metadata:
|
||
|
name: policies.kyverno.io
|
||
|
spec:
|
||
|
group: kyverno.io
|
||
|
versions:
|
||
|
- name: v1alpha1
|
||
|
served: true
|
||
|
storage: true
|
||
|
scope: Cluster
|
||
|
names:
|
||
|
kind: Policy
|
||
|
plural: policies
|
||
|
singular: policy
|
||
|
subresources:
|
||
|
status: {}
|
||
|
validation:
|
||
|
openAPIV3Schema:
|
||
|
properties:
|
||
|
spec:
|
||
|
required:
|
||
|
- rules
|
||
|
properties:
|
||
|
rules:
|
||
|
type: array
|
||
|
items:
|
||
|
type: object
|
||
|
required:
|
||
|
- name
|
||
|
- resource
|
||
|
properties:
|
||
|
name:
|
||
|
type: string
|
||
|
resource:
|
||
|
type: object
|
||
|
required:
|
||
|
- kinds
|
||
|
properties:
|
||
|
kinds:
|
||
|
type: array
|
||
|
items:
|
||
|
type: string
|
||
|
name:
|
||
|
type: string
|
||
|
selector:
|
||
|
properties:
|
||
|
matchLabels:
|
||
|
type: object
|
||
|
additionalProperties:
|
||
|
type: string
|
||
|
matchExpressions:
|
||
|
type: array
|
||
|
items:
|
||
|
type: object
|
||
|
required:
|
||
|
- key
|
||
|
- operator
|
||
|
properties:
|
||
|
key:
|
||
|
type: string
|
||
|
operator:
|
||
|
type: string
|
||
|
values:
|
||
|
type: array
|
||
|
items:
|
||
|
type: string
|
||
|
mutate:
|
||
|
type: object
|
||
|
properties:
|
||
|
overlay:
|
||
|
AnyValue: {}
|
||
|
patches:
|
||
|
type: array
|
||
|
items:
|
||
|
type: object
|
||
|
required:
|
||
|
- path
|
||
|
- op
|
||
|
properties:
|
||
|
path:
|
||
|
type: string
|
||
|
op:
|
||
|
type: string
|
||
|
enum:
|
||
|
- add
|
||
|
- replace
|
||
|
- remove
|
||
|
value:
|
||
|
AnyValue: {}
|
||
|
validate:
|
||
|
type: object
|
||
|
required:
|
||
|
- pattern
|
||
|
properties:
|
||
|
message:
|
||
|
type: string
|
||
|
pattern:
|
||
|
AnyValue: {}
|
||
|
generate:
|
||
|
type: object
|
||
|
required:
|
||
|
- kind
|
||
|
- name
|
||
|
properties:
|
||
|
kind:
|
||
|
type: string
|
||
|
name:
|
||
|
type: string
|
||
|
clone:
|
||
|
type: object
|
||
|
required:
|
||
|
- namespace
|
||
|
- name
|
||
|
properties:
|
||
|
namespace:
|
||
|
type: string
|
||
|
name:
|
||
|
type: string
|
||
|
data:
|
||
|
AnyValue: {}
|
||
|
---
|
||
|
kind: Namespace
|
||
|
apiVersion: v1
|
||
|
metadata:
|
||
|
name: "kyverno"
|