mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 09:26:54 +00:00
38 lines
No EOL
1 KiB
YAML
38 lines
No EOL
1 KiB
YAML
apiVersion : kyverno.nirmata.io/v1alpha1
|
|
kind: Policy
|
|
metadata:
|
|
name: check-cpu-memory
|
|
spec:
|
|
rules:
|
|
- name: check-defined
|
|
resource:
|
|
kinds:
|
|
- Deployment
|
|
validate:
|
|
message: "Resource requests and limits are required for CPU and memory"
|
|
pattern:
|
|
spec:
|
|
containers:
|
|
- name: "*"
|
|
resources:
|
|
limits:
|
|
memory: "?"
|
|
cpu: "?"
|
|
requests:
|
|
memory: "?"
|
|
cpu: "?"
|
|
- name: check-memory-in-range
|
|
resource:
|
|
kinds:
|
|
- Deployment
|
|
validate:
|
|
message: "Memory request cannot be greater than 10Gi"
|
|
pattern:
|
|
spec:
|
|
containers:
|
|
- name: "*"
|
|
resources:
|
|
requests:
|
|
# If the value contains logical operator, the integer after it will be checked. No numeric characters will be a part of pattern.
|
|
# The OR operator can combine the patterns with logical expressions and text patterns.
|
|
memory: "<10Gi|<1024Mi" |