mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
27 lines
536 B
YAML
27 lines
536 B
YAML
podSecurityStandard: restricted
|
|
includeOtherPolicies:
|
|
- require-non-root-groups
|
|
validationFailureActionOverrides:
|
|
all:
|
|
- action: audit
|
|
namespaces:
|
|
- ingress-nginx
|
|
disallow-host-path:
|
|
- action: audit
|
|
namespaces:
|
|
- fluent
|
|
policyExclude:
|
|
disallow-host-path:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Pod
|
|
namespaces:
|
|
- fluent
|
|
require-non-root-groups:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Pod
|
|
namespaces:
|
|
- fluent
|