fix: fix kyveno policies
This commit is contained in:
@@ -1,20 +1,20 @@
|
||||
{{- if .Values.kyverno.enabled }}
|
||||
{{- if .Values.clusterConfig.kyverno.enabled }}
|
||||
apiVersion: kyverno.io/v1
|
||||
kind: ClusterPolicy
|
||||
metadata:
|
||||
name: whitelist-internal-ingresses
|
||||
annotations:
|
||||
policies.kyverno.io/title: Concatenate Ingresss
|
||||
policies.kyverno.io/category: Other
|
||||
policies.kyverno.io/severity: medium
|
||||
policies.kyverno.io/subject: Ingress
|
||||
policies.kyverno.io/description: >-
|
||||
Ingresses with the label "internal=true" should be whitelisted.
|
||||
If no whitelist exists, add the default values, otherwise append
|
||||
policies.clusterConfig.kyverno.io/title: Concatenate Ingresss
|
||||
policies.clusterConfig.kyverno.io/category: Other
|
||||
policies.clusterConfig.kyverno.io/severity: medium
|
||||
policies.clusterConfig.kyverno.io/subject: Ingress
|
||||
policies.clusterConfig.kyverno.io/description: >-
|
||||
Ingresses with the label "internal=true" should be whitelisted.
|
||||
If no whitelist exists, add the default values, otherwise append
|
||||
whitelist to the already existing ones
|
||||
spec:
|
||||
mutateExistingOnPolicyUpdate: false
|
||||
#precondition: has whitelist annotation or
|
||||
#precondition: has whitelist annotation or
|
||||
rules:
|
||||
- name: ensure-nginx-whitelist-exists
|
||||
skipBackgroundRequests: true
|
||||
|
||||
Reference in New Issue
Block a user