mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 18:06:55 +00:00
* feat: add events for successful generation Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * fix Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * fix Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * modify generate events messages Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * fix: modify mutate event messages Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * feat: add kuttl tests Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * fix Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * add kuttl test for skip generation Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> * Add kuttl test for failures Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com> --------- Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com>
30 lines
615 B
YAML
30 lines
615 B
YAML
apiVersion: kyverno.io/v1
|
|
kind: ClusterPolicy
|
|
metadata:
|
|
name: default
|
|
spec:
|
|
rules:
|
|
- name: deny-all-traffic
|
|
match:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Namespace
|
|
exclude:
|
|
any:
|
|
- resources:
|
|
namespaces:
|
|
- test-ns
|
|
- ns-1
|
|
generate:
|
|
kind: NetworkPolicy
|
|
apiVersion: networking.k8s.io/v1
|
|
name: deny-all-traffic
|
|
namespace: "{{request.object.metadata.name}}"
|
|
data:
|
|
spec:
|
|
# select all pods in the namespace
|
|
podSelector: {}
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|