mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 01:46:55 +00:00
* chore: run events test suite using chainsaw Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * chainsaw main test Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * bump chainsaw Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
30 lines
615 B
YAML
30 lines
615 B
YAML
apiVersion: kyverno.io/v1
|
|
kind: ClusterPolicy
|
|
metadata:
|
|
name: default
|
|
spec:
|
|
rules:
|
|
- name: deny-all-traffic
|
|
match:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Namespace
|
|
exclude:
|
|
any:
|
|
- resources:
|
|
namespaces:
|
|
- test-ns
|
|
- ns-1
|
|
generate:
|
|
kind: NetworkPolicy
|
|
apiVersion: networking.k8s.io/v1
|
|
name: deny-all-traffic
|
|
namespace: "{{request.object.metadata.name}}"
|
|
data:
|
|
spec:
|
|
# select all pods in the namespace
|
|
podSelector: {}
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|