mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
Merge branch 'master' of https://github.com/nirmata/kyverno
This commit is contained in:
commit
4274e67834
1 changed files with 0 additions and 24 deletions
|
@ -1,24 +0,0 @@
|
|||
apiVersion : kyverno.io/v1alpha1
|
||||
kind: Policy
|
||||
metadata:
|
||||
name: pod-security-context
|
||||
spec:
|
||||
rules:
|
||||
- name: set-userID
|
||||
resource:
|
||||
kinds:
|
||||
- Deployment
|
||||
selector :
|
||||
matchLabels:
|
||||
app.type: prod
|
||||
validate:
|
||||
message: "secure pod"
|
||||
pattern:
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
hostNetwork: false
|
||||
hostIPC: false
|
||||
hostPID: false
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
Loading…
Add table
Reference in a new issue