mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 17:37:12 +00:00
37ab9ba824
* fix: range through all resources to build webhook Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * chore: add tests Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * chore: correct conformance Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * chore: correct conformance pod all subresources Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * fix: append resource when operations and scope is same Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * fix: correct tests Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * fix: chainsaw tests Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * fix: flaky test Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> * chore: remove debug lines Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> --------- Signed-off-by: anushkamittal20 <anumittal4641@gmail.com> Co-authored-by: anushkamittal20 <anumittal4641@gmail.com> Co-authored-by: shuting <shuting@nirmata.com>
29 lines
No EOL
745 B
YAML
29 lines
No EOL
745 B
YAML
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
labels:
|
|
webhook.kyverno.io/managed-by: kyverno
|
|
name: kyverno-resource-validating-webhook-cfg
|
|
webhooks:
|
|
- rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CONNECT
|
|
- CREATE
|
|
- DELETE
|
|
- UPDATE
|
|
resources:
|
|
(contains(@,'pods/status')): true
|
|
(contains(@,'pods/log')): true
|
|
(contains(@,'pods/attach')): true
|
|
(contains(@,'pods/ephemeralcontainers')): true
|
|
(contains(@,'pods/eviction')): true
|
|
(contains(@,'pods/exec')): true
|
|
(contains(@,'pods/portforward')): true
|
|
(contains(@,'pods/binding')): true
|
|
(contains(@,'pods/proxy')): true
|
|
scope: 'Namespaced'
|
|
|