DevFW-CICD/ingress-nginx-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy GitHub Pages

Browse source
This commit is contained in:
k8s-ci-robot 2024-09-06 15:00:30 +00:00
parent bb6760d40c
commit 2bd12e11b1
8 changed files with 75 additions and 75 deletions
Download patch file Download diff file Expand all files Collapse all files

2
examples/openpolicyagent/index.html
View file

File diff suppressed because one or more lines are too long

10
examples/openpolicyagent/template.yaml
View file

@ -17,11 +17,11 @@ spec:
properties:
blockedTypes:
type: array
items:
type: string
items:
type: string
namespacesExceptions:
type: array
items:
items:
type: string
targets:
- target: admission.k8s.gatekeeper.sh
@ -31,8 +31,8 @@ spec:
violation[{"msg": msg}] {
input.review.kind.kind == "Ingress"
ns := input.review.object.metadata.namespace
excemptNS := [good | excempts = input.parameters.namespacesExceptions[_] ; good = excempts == ns]
not any(excemptNS)
exemptNS := [good | exempts = input.parameters.namespacesExceptions[_] ; good = exempts == ns]
not any(exemptNS)
pathType := object.get(input.review.object.spec.rules[_].http.paths[_], "pathType", "")
blockedPath := [blocked | blockedTypes = input.parameters.blockedTypes[_] ; blocked = blockedTypes == pathType]
any(blockedPath)