mirror of
https://github.com/argoproj/argo-cd
synced 2026-04-21 17:07:16 +00:00
f4c4c66f38
Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com> Signed-off-by: Alexandre Gaudreault <alexandre_gaudreault@intuit.com> Co-authored-by: Alexandre Gaudreault <alexandre_gaudreault@intuit.com>
60 lines
1.8 KiB
YAML
60 lines
1.8 KiB
YAML
apiVersion: policy.open-cluster-management.io/v1
|
|
kind: Policy
|
|
metadata:
|
|
generation: 4
|
|
name: argo-example
|
|
namespace: open-cluster-management-global-set
|
|
spec:
|
|
disabled: true
|
|
policy-templates:
|
|
- objectDefinition:
|
|
apiVersion: policy.open-cluster-management.io/v1
|
|
kind: ConfigurationPolicy
|
|
metadata:
|
|
name: example-namespace
|
|
spec:
|
|
object-templates:
|
|
- complianceType: musthave
|
|
objectDefinition:
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: example
|
|
remediationAction: inform
|
|
severity: low
|
|
- objectDefinition:
|
|
apiVersion: policy.open-cluster-management.io/v1
|
|
kind: ConfigurationPolicy
|
|
metadata:
|
|
name: example-pod
|
|
spec:
|
|
namespaceSelector:
|
|
exclude:
|
|
- kube-*
|
|
include:
|
|
- default
|
|
object-templates:
|
|
- complianceType: musthave
|
|
objectDefinition:
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: foobar
|
|
spec:
|
|
containers:
|
|
- image: 'registry.redhat.io/rhel9/httpd-24:latest'
|
|
name: httpd
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
privileged: false
|
|
runAsNonRoot: true
|
|
remediationAction: inform
|
|
severity: low
|
|
remediationAction: inform
|
|
status:
|
|
placement:
|
|
- placement: argo-example-placement
|
|
placementBinding: argo-example-placement
|