mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
7b31f456c9
* Implement validationFailureActionByPolicy * Update README.md * Add artifacthub.io/changes entry * Add Test Case Signed-off-by: dschunack <dschunack@web.de>
29 lines
604 B
YAML
29 lines
604 B
YAML
podSecurityStandard: restricted
|
|
includeOtherPolicies:
|
|
- require-non-root-groups
|
|
validationFailureActionByPolicy:
|
|
require-non-root-groups: enforce
|
|
validationFailureActionOverrides:
|
|
all:
|
|
- action: audit
|
|
namespaces:
|
|
- ingress-nginx
|
|
disallow-host-path:
|
|
- action: audit
|
|
namespaces:
|
|
- fluent
|
|
policyExclude:
|
|
disallow-host-path:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Pod
|
|
namespaces:
|
|
- fluent
|
|
require-non-root-groups:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Pod
|
|
namespaces:
|
|
- fluent
|