mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-18 02:06:52 +00:00
Code Activity

fix line breaks in table

Browse source
This commit is contained in:
Jim Bugwadia 2019-10-29 22:21:04 -07:00
parent 406282f985
commit bdaf5bbb3c
1 changed files with 4 additions and 4 deletions

8
documentation/writing-policies-validate.md
View file

@ -36,10 +36,10 @@ There is no operator for `equals` as providing a field value in the pattern requ
## Anchors
| Anchor | Tag | Behavior |
|------------- |----- |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Conditional | () | If tag with the given value is specified, then following resource elements must satisfy the conditions. e.g. <br><code> (image):"*:latest" <br> imagePullPolicy: "!IfNotPresent"</code> <br> If image has tag latest then, imagePullPolicy cannot be IfNotPresent. |
| Equality | =() | If tag is specified, then it should have the provided value. e.g.<br><code> =(hostPath):<br> path: "!/var/lib" </code><br> If hostPath is defined then the path cannot be /var/lib |
| Existence | ^() | Specified on the list/array type only. If at least one element in the satisfies the pattern. e.g. <br><code> ^(containers):<br> - image: nginx:latest </code><br> At least one container with image nginx:latest must exist. |
| Negation | X() | The tag cannot be specified. The value of the tag is not evaulated. e.g. <br><code> X(hostPath):</code><br> Hostpath tag cannot be defined. |
| Conditional | () | If tag with the given value is specified, then following resource elements must satisfy the conditions. <br/>e.g. If image has tag latest then imagePullPolicy cannot be IfNotPresent. <br/>&nbsp;&nbsp;&nbsp;&nbsp;(image):"*:latest" <br>&nbsp;&nbsp;&nbsp;&nbsp;imagePullPolicy: "!IfNotPresent"<br/> |
| Equality | =() | If tag is specified, then it should have the provided value. <br/>e.g. If hostPath is defined then the path cannot be /var/lib<br/>&nbsp;&nbsp;&nbsp;&nbsp;=(hostPath):<br/>&nbsp;&nbsp;&nbsp;&nbsp;path: "!/var/lib"<br/> |
| Existence | ^() | Works on the list/array type only. If at least one element in the satisfies the pattern. <br/>e.g. At least one container with image nginx:latest must exist. <br/>&nbsp;&nbsp;&nbsp;&nbsp;^(containers):<br/>&nbsp;&nbsp;&nbsp;&nbsp;- image: nginx:latest<br/> |
| Negation | X() | The tag cannot be specified. The value of the tag is not evaulated. <br/>e.g. Hostpath tag cannot be defined.<br/>&nbsp;&nbsp;&nbsp;&nbsp;X(hostPath):<br/> |
## Example
The following rule prevents the creation of Deployment, StatefuleSet and DaemonSet resources without label 'app' in selector: