29 lines
914 B
YAML
29 lines
914 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- canonical-cilium-cidrs.yaml
|
|
- require-app-labels.yaml
|
|
- quay-job-labels.yaml
|
|
- deny-latest-tag.yaml
|
|
- cilium-networkpolicy-coverage.yaml
|
|
- deny-privileged.yaml
|
|
- require-drop-all-capabilities.yaml
|
|
- require-allow-privilege-escalation-false.yaml
|
|
- require-resource-requests.yaml
|
|
- min-replicas.yaml
|
|
- require-public-runtime-gvisor.yaml
|
|
# Track C Gateway (Audit)
|
|
- require-gateway-route-selectors.yaml
|
|
- restrict-route-parentrefs.yaml
|
|
- restrict-route-backends.yaml
|
|
- restrict-referencegrants.yaml
|
|
- protect-shared-gateways.yaml
|
|
- audit-gateway-api-rbac.yaml
|
|
- restrict-gateway-client-label.yaml
|
|
# 2b expanded Audit
|
|
- restrict-image-registries.yaml
|
|
- restrict-zot-image-pulls.yaml
|
|
- restrict-pod-host-access.yaml
|
|
- require-vso-secret-labels.yaml
|
|
- tls-activation.yaml
|
|
- tls-rollout.yaml
|