mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
Merge branch 'master' of https://github.com/nirmata/kyverno
This commit is contained in:
commit
4274e67834
1 changed files with 0 additions and 24 deletions
|
@ -1,24 +0,0 @@
|
||||||
apiVersion : kyverno.io/v1alpha1
|
|
||||||
kind: Policy
|
|
||||||
metadata:
|
|
||||||
name: pod-security-context
|
|
||||||
spec:
|
|
||||||
rules:
|
|
||||||
- name: set-userID
|
|
||||||
resource:
|
|
||||||
kinds:
|
|
||||||
- Deployment
|
|
||||||
selector :
|
|
||||||
matchLabels:
|
|
||||||
app.type: prod
|
|
||||||
validate:
|
|
||||||
message: "secure pod"
|
|
||||||
pattern:
|
|
||||||
spec:
|
|
||||||
template:
|
|
||||||
spec:
|
|
||||||
hostNetwork: false
|
|
||||||
hostIPC: false
|
|
||||||
hostPID: false
|
|
||||||
securityContext:
|
|
||||||
runAsNonRoot: true
|
|
Loading…
Add table
Reference in a new issue