mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-15 17:51:20 +00:00
fix sp
This commit is contained in:
parent
a72947b500
commit
8da3afc79d
1 changed files with 5 additions and 4 deletions
|
@ -15,7 +15,8 @@ Kyverno is a policy engine built for Kubernetes:
|
||||||
|
|
||||||
## Quick Start
|
## Quick Start
|
||||||
|
|
||||||
**NOTE** : Your Kubernetes cluster version must be above v1.14 which adds webook timeouts. To check the version, enter `kubectl version`.
|
**NOTE** : Your Kubernetes cluster version must be above v1.14 which adds webhook timeouts.
|
||||||
|
To check the version, enter `kubectl version`.
|
||||||
|
|
||||||
Install Kyverno:
|
Install Kyverno:
|
||||||
```console
|
```console
|
||||||
|
@ -26,9 +27,9 @@ You can also install Kyverno using a [Helm chart](https://github.com/nirmata/kyv
|
||||||
|
|
||||||
Add the policy below. It contains a single validation rule that requires that all pods have
|
Add the policy below. It contains a single validation rule that requires that all pods have
|
||||||
a `app.kubernetes.io/name` label. Kyverno supports different rule types to validate,
|
a `app.kubernetes.io/name` label. Kyverno supports different rule types to validate,
|
||||||
mutate, and generate configurations. The `validationFailureAction` is set to `enforce`
|
mutate, and generate configurations. The policy attribute `validationFailureAction` is set
|
||||||
to block requests that are non-compliant (the value `audit` will report violations but
|
to `enforce` to block API requests that are non-compliant (using the value `audit` will report
|
||||||
not block requests.)
|
violations but not block requests.)
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
apiVersion: kyverno.io/v1
|
apiVersion: kyverno.io/v1
|
||||||
|
|
Loading…
Reference in a new issue