2019-05-22 17:57:40 -07:00
|
|
|
apiVersion : kyverno.io/v1alpha1
|
2019-03-19 14:06:12 +02:00
|
|
|
kind : Policy
|
|
|
|
metadata :
|
|
|
|
name : policy-limitrange
|
|
|
|
spec :
|
|
|
|
rules:
|
2019-05-21 15:43:43 -07:00
|
|
|
- name: "rule"
|
2019-05-21 17:54:55 +03:00
|
|
|
resource:
|
2019-06-10 16:08:35 +03:00
|
|
|
kinds :
|
2019-05-21 15:43:43 -07:00
|
|
|
- LimitRange
|
2019-03-19 14:06:12 +02:00
|
|
|
selector:
|
|
|
|
matchLabels:
|
|
|
|
containerSize: minimal
|
2019-05-21 17:54:55 +03:00
|
|
|
mutate:
|
|
|
|
patches:
|
2019-06-10 16:08:35 +03:00
|
|
|
- path : "/spec/limits/0/default/memory"
|
|
|
|
op : add
|
|
|
|
value: 384Mi
|
2019-05-21 17:54:55 +03:00
|
|
|
validate:
|
|
|
|
message: "The CPU value is incorrect"
|
|
|
|
pattern:
|
|
|
|
spec:
|
|
|
|
limits:
|
|
|
|
- default:
|
2019-06-10 16:08:35 +03:00
|
|
|
cpu: 10m
|