mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 18:06:55 +00:00
31 lines
615 B
YAML
31 lines
615 B
YAML
|
apiVersion: kyverno.io/v1
|
||
|
kind: ClusterPolicy
|
||
|
metadata:
|
||
|
name: default
|
||
|
spec:
|
||
|
rules:
|
||
|
- name: deny-all-traffic
|
||
|
match:
|
||
|
any:
|
||
|
- resources:
|
||
|
kinds:
|
||
|
- Namespace
|
||
|
exclude:
|
||
|
any:
|
||
|
- resources:
|
||
|
namespaces:
|
||
|
- test-ns
|
||
|
- ns-1
|
||
|
generate:
|
||
|
kind: NetworkPolicy
|
||
|
apiVersion: networking.k8s.io/v1
|
||
|
name: deny-all-traffic
|
||
|
namespace: "{{request.object.metadata.name}}"
|
||
|
data:
|
||
|
spec:
|
||
|
# select all pods in the namespace
|
||
|
podSelector: {}
|
||
|
policyTypes:
|
||
|
- Ingress
|
||
|
- Egress
|