51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
apiVersion: cli.kyverno.io/v1alpha1
|
|
kind: Values
|
|
metadata:
|
|
name: gateway-status
|
|
globalValues:
|
|
request.operation: UPDATE
|
|
policies:
|
|
- name: protect-shared-gateways
|
|
resources:
|
|
- name: gateway-short
|
|
values:
|
|
request.oldObject.spec:
|
|
gatewayClassName: cilium
|
|
listeners:
|
|
- name: http
|
|
port: 80
|
|
protocol: HTTP
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: Selector
|
|
selector:
|
|
matchLabels:
|
|
gateway.quorate.internal/allow-short: 'true'
|
|
- name: gateway-relay
|
|
values:
|
|
request.oldObject.spec:
|
|
gatewayClassName: cilium
|
|
listeners:
|
|
- name: http
|
|
port: 80
|
|
protocol: HTTP
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: Selector
|
|
selector:
|
|
matchLabels:
|
|
gateway.quorate.internal/allow-public: 'true'
|
|
- name: gateway-internal
|
|
values:
|
|
request.oldObject.spec:
|
|
gatewayClassName: cilium
|
|
listeners:
|
|
- name: http
|
|
port: 80
|
|
protocol: HTTP
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: Selector
|
|
selector:
|
|
matchLabels:
|
|
gateway.quorate.internal/allow-internal: 'true'
|