ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c

View file

@ -0,0 +1,51 @@
apiVersion: cli.kyverno.io/v1alpha1
kind: Values
metadata:
name: gateway-status
globalValues:
request.operation: UPDATE
policies:
- name: protect-shared-gateways
resources:
- name: gateway-short
values:
request.oldObject.spec:
gatewayClassName: cilium
listeners:
- name: http
port: 80
protocol: HTTP
allowedRoutes:
namespaces:
from: Selector
selector:
matchLabels:
gateway.quorate.internal/allow-short: 'true'
- name: gateway-relay
values:
request.oldObject.spec:
gatewayClassName: cilium
listeners:
- name: http
port: 80
protocol: HTTP
allowedRoutes:
namespaces:
from: Selector
selector:
matchLabels:
gateway.quorate.internal/allow-public: 'true'
- name: gateway-internal
values:
request.oldObject.spec:
gatewayClassName: cilium
listeners:
- name: http
port: 80
protocol: HTTP
allowedRoutes:
namespaces:
from: Selector
selector:
matchLabels:
gateway.quorate.internal/allow-internal: 'true'