ce7cb702218693d08ea6d83464d2457c9250027c
This commit is contained in:
commit
34c5f8963c
1 changed files with 145336 additions and 0 deletions
29
vendor/platform/kyverno/policies/kustomization.yaml
vendored
Normal file
29
vendor/platform/kyverno/policies/kustomization.yaml
vendored
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- canonical-cilium-cidrs.yaml
|
||||
- require-app-labels.yaml
|
||||
- quay-job-labels.yaml
|
||||
- deny-latest-tag.yaml
|
||||
- cilium-networkpolicy-coverage.yaml
|
||||
- deny-privileged.yaml
|
||||
- require-drop-all-capabilities.yaml
|
||||
- require-allow-privilege-escalation-false.yaml
|
||||
- require-resource-requests.yaml
|
||||
- min-replicas.yaml
|
||||
- require-public-runtime-gvisor.yaml
|
||||
# Track C Gateway (Audit)
|
||||
- require-gateway-route-selectors.yaml
|
||||
- restrict-route-parentrefs.yaml
|
||||
- restrict-route-backends.yaml
|
||||
- restrict-referencegrants.yaml
|
||||
- protect-shared-gateways.yaml
|
||||
- audit-gateway-api-rbac.yaml
|
||||
- restrict-gateway-client-label.yaml
|
||||
# 2b expanded Audit
|
||||
- restrict-image-registries.yaml
|
||||
- restrict-zot-image-pulls.yaml
|
||||
- restrict-pod-host-access.yaml
|
||||
- require-vso-secret-labels.yaml
|
||||
- tls-activation.yaml
|
||||
- tls-rollout.yaml
|
||||
Loading…
Reference in a new issue