1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-15 17:51:20 +00:00
This commit is contained in:
Jim Bugwadia 2020-07-05 17:23:33 -07:00
parent a72947b500
commit 8da3afc79d

View file

@ -15,7 +15,8 @@ Kyverno is a policy engine built for Kubernetes:
## Quick Start ## Quick Start
**NOTE** : Your Kubernetes cluster version must be above v1.14 which adds webook timeouts. To check the version, enter `kubectl version`. **NOTE** : Your Kubernetes cluster version must be above v1.14 which adds webhook timeouts.
To check the version, enter `kubectl version`.
Install Kyverno: Install Kyverno:
```console ```console
@ -26,9 +27,9 @@ You can also install Kyverno using a [Helm chart](https://github.com/nirmata/kyv
Add the policy below. It contains a single validation rule that requires that all pods have Add the policy below. It contains a single validation rule that requires that all pods have
a `app.kubernetes.io/name` label. Kyverno supports different rule types to validate, a `app.kubernetes.io/name` label. Kyverno supports different rule types to validate,
mutate, and generate configurations. The `validationFailureAction` is set to `enforce` mutate, and generate configurations. The policy attribute `validationFailureAction` is set
to block requests that are non-compliant (the value `audit` will report violations but to `enforce` to block API requests that are non-compliant (using the value `audit` will report
not block requests.) violations but not block requests.)
```yaml ```yaml
apiVersion: kyverno.io/v1 apiVersion: kyverno.io/v1