mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

update the policy

Browse source
This commit is contained in:
shivkumar dudhani 2019-10-31 13:29:16 -07:00
parent 7e7286a9c1
commit ea9bfe32cb
2 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
samples/best_practices/require_namespace_quota.yaml
View file

@ -20,7 +20,7 @@ spec:
data:
spec:
hard:
requests.cpu: '4'
requests.memory: "16Gi"
limits.cpu: '4'
limits.memory: "16Gi"
requests.cpu: 4
requests.memory: 16Gi
limits.cpu: 4
limits.memory: 16Gi

6
samples/more/policy_validate_user_group_fsgroup_id.yaml
View file

@ -20,7 +20,7 @@ spec:
pattern:
spec:
securityContext:
runAsUser: '1000'
runAsUser: 1000
- name: validate-groupid
match:
resources:
@ -31,7 +31,7 @@ spec:
pattern:
spec:
securityContext:
runAsGroup: '3000'
runAsGroup: 3000
- name: validate-fsgroup
match:
resources:
@ -42,7 +42,7 @@ spec:
pattern:
spec:
securityContext:
fsGroup: '2000'
fsGroup: 2000
# Alls processes inside the pod can be made to run with specific user and groupID by setting runAsUser and runAsGroup respectively.
# fsGroup can be specified to make sure any file created in the volume with have the specified groupID.
# The above parameters can also be used in a validate policy to restrict user & group IDs.