mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 09:26:54 +00:00
2140a0239b
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> Co-authored-by: Jim Bugwadia <jim@nirmata.com>
43 lines
1.3 KiB
YAML
43 lines
1.3 KiB
YAML
apiVersion: kyverno.io/v1
|
|
kind: ClusterPolicy
|
|
metadata:
|
|
name: validate-yaml
|
|
spec:
|
|
background: false
|
|
rules:
|
|
- name: validate-yaml
|
|
match:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Service
|
|
validate:
|
|
failureAction: Enforce
|
|
manifests:
|
|
attestors:
|
|
- entries:
|
|
- keys:
|
|
publicKeys: |-
|
|
-----BEGIN PUBLIC KEY-----
|
|
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyQfmL5YwHbn9xrrgG3vgbU0KJxMY
|
|
BibYLJ5L4VSMvGxeMLnBGdM48w5IE//6idUPj3rscigFdHs7GDMH4LLAng==
|
|
-----END PUBLIC KEY-----
|
|
rekor:
|
|
url: https://rekor.sigstore.dev
|
|
ignoreTlog: true
|
|
ctlog:
|
|
ignoreSCT: true
|
|
- keys:
|
|
publicKeys: |-
|
|
-----BEGIN PUBLIC KEY-----
|
|
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEE8uGVnyDWPPlB7M5KOHRzxzPHtAy
|
|
FdGxexVrR4YqO1pRViKxmD9oMu4I7K/4sM51nbH65ycB2uRiDfIdRoV/+A==
|
|
-----END PUBLIC KEY-----
|
|
rekor:
|
|
url: https://rekor.sigstore.dev
|
|
ignoreTlog: true
|
|
ctlog:
|
|
ignoreSCT: true
|
|
webhookConfiguration:
|
|
timeoutSeconds: 30
|
|
failurePolicy: Fail
|