ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c

View file

@ -0,0 +1,29 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- canonical-cilium-cidrs.yaml
- require-app-labels.yaml
- quay-job-labels.yaml
- deny-latest-tag.yaml
- cilium-networkpolicy-coverage.yaml
- deny-privileged.yaml
- require-drop-all-capabilities.yaml
- require-allow-privilege-escalation-false.yaml
- require-resource-requests.yaml
- min-replicas.yaml
- require-public-runtime-gvisor.yaml
# Track C Gateway (Audit)
- require-gateway-route-selectors.yaml
- restrict-route-parentrefs.yaml
- restrict-route-backends.yaml
- restrict-referencegrants.yaml
- protect-shared-gateways.yaml
- audit-gateway-api-rbac.yaml
- restrict-gateway-client-label.yaml
# 2b expanded Audit
- restrict-image-registries.yaml
- restrict-zot-image-pulls.yaml
- restrict-pod-host-access.yaml
- require-vso-secret-labels.yaml
- tls-activation.yaml
- tls-rollout.yaml