127 commits

Author	SHA1	Message	Date
shivkumar dudhani	d98ba1ab1a	remove audit flag, as its default behavior	2019-10-14 14:17:07 -07:00
Shuting Zhao	61808837fb	update description	2019-10-14 13:58:47 -07:00
Shuting Zhao	4d2bcef411	remove duplicate	2019-10-14 13:50:00 -07:00
Shuting Zhao	75806146c6	Merge branch 'best_practice_policies' into 337_policy_description ... # Conflicts: # samples/README.md	2019-10-14 13:21:10 -07:00
shivkumar dudhani	4abdec337d	documentation updates	2019-10-14 10:47:54 -07:00
Shuting Zhao	46f72cb424	Provide descriptions for policies	2019-10-11 18:57:16 -07:00
Shuting Zhao	38bf4d6055	add 'deny-use-of-host-fs'	2019-10-10 18:42:54 -07:00
Shuting Zhao	24f3b8ac96	disallow automountServiceAccountToken	2019-10-10 12:29:48 -07:00
Shuting Zhao	f1ed0720c4	update default network policy to deny all ingress traffic	2019-10-10 11:08:20 -07:00
Shuting Zhao	7fcc6bbd33	require default namespace resource quota	2019-10-10 10:46:11 -07:00
Shuting Zhao	3087257b46	disallow use of default namespace	2019-10-10 10:34:49 -07:00
Shuting Zhao	012360ae3a	allow trusted registries	2019-10-10 10:29:10 -07:00
Shuting Zhao	995efc4e63	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # samples/README.md	2019-10-09 23:50:49 -07:00
Shuting Zhao	c51c28bdd2	update readme	2019-10-09 23:46:18 -07:00
shivkumar dudhani	3f33e925f3	handle default and omitempty with condition anchor	2019-10-09 21:07:45 -07:00
Shuting Zhao	48c2c39da7	add samples/best_practices/require_default_network_policy.yaml	2019-10-09 18:52:48 -07:00
Shuting Zhao	4d29b461ff	add require_image_tag_not_latest.yaml	2019-10-09 18:35:07 -07:00
Shuting Zhao	3e1ef320a8	add require_probes.yaml	2019-10-09 17:49:00 -07:00
Shuting Zhao	ea25ed8460	add check-pod-request-limit.yaml	2019-10-09 17:37:31 -07:00
Shuting Zhao	381210e977	add disallow_node_port.yaml	2019-10-08 22:13:34 -07:00
Shuting Zhao	18c190447f	update require-readonly-rootfilesystem.yaml	2019-10-08 22:09:58 -07:00
Shuting Zhao	cb44585d70	add disallow_readonly_rootfilesystem.yaml	2019-10-08 22:05:15 -07:00
Shuting Zhao	c755df6b70	add scenario_validate_disallow_hostpid_hostipc.yaml	2019-10-08 21:58:05 -07:00
Shuting Zhao	ce41e4a99d	add disallow_host_network_hostport.yaml	2019-10-08 21:51:35 -07:00
Shuting Zhao	0c0a9a69a6	add disallow_priviledged_privelegesecalation.yaml	2019-10-08 21:42:49 -07:00
Shuting Zhao	8f8bd05106	add samples/best_practices/deny_runasrootuser.yaml	2019-10-08 21:30:19 -07:00
Shuting Zhao	42f0bf8e0e	inital commit, add samples folder	2019-10-08 18:40:15 -07:00