mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
0ae671ca7a
* Support releasing kyverno and kyverno-policies chart separately (#3672) Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu> * Add DELETE precondition back (#3657) * Add DELETE precondition back Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu> * Add another example and test for 'any' Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu> Co-authored-by: shuting <shuting@nirmata.com>
19 lines
522 B
YAML
19 lines
522 B
YAML
podSecurityStandard: restricted
|
|
includeOtherPolicies:
|
|
- require-non-root-groups
|
|
policyPreconditions:
|
|
require-run-as-non-root-user:
|
|
all:
|
|
- key: "{{ request.object.metadata.name }}"
|
|
operator: NotEquals
|
|
value: "dcgm-exporter*"
|
|
require-drop-all:
|
|
any:
|
|
- key: "{{ request.object.metadata.name }}"
|
|
operator: NotEquals
|
|
value: "dcgm-exporter*"
|
|
adding-capabilities-strict:
|
|
all:
|
|
- key: "{{ request.object.metadata.name }}"
|
|
operator: NotEquals
|
|
value: "dcgm-exporter*"
|