mirror of
https://github.com/kyverno/kyverno.git
synced 2025-04-16 09:16:24 +00:00
c52f07b615
* new samples; updates * typos * add policy to restrict LoadBalancer * correct sample numbering * fix typos
29 lines
No EOL
854 B
YAML
29 lines
No EOL
854 B
YAML
apiVersion: kyverno.io/v1
|
|
kind: ClusterPolicy
|
|
metadata:
|
|
name: spread-pods
|
|
spec:
|
|
rules:
|
|
- name: spread-pods-across-nodes
|
|
# Matches any Deployment with the label `distributed=required`
|
|
match:
|
|
resources:
|
|
kinds:
|
|
- Deployment
|
|
selector:
|
|
matchLabels:
|
|
distributed: required
|
|
# Mutates the incoming Deployment.
|
|
mutate:
|
|
patchStrategicMerge:
|
|
spec:
|
|
template:
|
|
spec:
|
|
# Adds the topologySpreadConstraints field if non-existent in the request.
|
|
+(topologySpreadConstraints):
|
|
- maxSkew: 1
|
|
topologyKey: zone
|
|
whenUnsatisfiable: DoNotSchedule
|
|
labelSelector:
|
|
matchLabels:
|
|
distributed: required |