mirror of
https://github.com/kyverno/kyverno.git
synced 2025-04-14 00:06:45 +00:00
6c9fdaf52b
* feat: add chainsaw test for policy webhook based configuration Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> --------- Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
27 lines
689 B
YAML
27 lines
689 B
YAML
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
labels:
|
|
webhook.kyverno.io/managed-by: kyverno
|
|
name: kyverno-resource-validating-webhook-cfg
|
|
webhooks:
|
|
- failurePolicy: Ignore
|
|
matchConditions:
|
|
- expression: '!("system:nodes" in request.userInfo.groups)'
|
|
name: exclude-requests-by-groups
|
|
matchPolicy: Equivalent
|
|
name: validate.kyverno.svc-ignore-finegrained-cpol-fine-grained-match-conditions-disallow-latest-image-tag-1
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
- CONNECT
|
|
resources:
|
|
- pods
|
|
- pods/ephemeralcontainers
|
|
scope: Namespaced
|