1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
This commit is contained in:
Shuting Zhao 2019-07-18 16:21:03 -07:00
commit 4274e67834

View file

@ -1,24 +0,0 @@
apiVersion : kyverno.io/v1alpha1
kind: Policy
metadata:
name: pod-security-context
spec:
rules:
- name: set-userID
resource:
kinds:
- Deployment
selector :
matchLabels:
app.type: prod
validate:
message: "secure pod"
pattern:
spec:
template:
spec:
hostNetwork: false
hostIPC: false
hostPID: false
securityContext:
runAsNonRoot: true