mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
1cfc80d32a
* Allow kyverno-policies to have preconditions defined Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu> * Fix docs Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
14 lines
389 B
YAML
14 lines
389 B
YAML
podSecurityStandard: restricted
|
|
includeOtherPolicies:
|
|
- require-non-root-groups
|
|
policyPreconditions:
|
|
require-run-as-non-root-user:
|
|
any:
|
|
- key: "{{ request.object.metadata.name }}"
|
|
operator: NotEquals
|
|
value: "dcgm-exporter*"
|
|
adding-capabilities-strict:
|
|
any:
|
|
- key: "{{ request.object.metadata.name }}"
|
|
operator: NotEquals
|
|
value: "dcgm-exporter*"
|