cleanup naming
This commit is contained in:
@@ -34,7 +34,7 @@ spec:
|
|||||||
apiVersion: admissionregistration.k8s.io/v1
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
kind: ValidatingAdmissionPolicy
|
kind: ValidatingAdmissionPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: "force-stage-ns-prefix-for-stage-editor"
|
name: "force-ns-prefix-for-stage-create-update"
|
||||||
spec:
|
spec:
|
||||||
failurePolicy: Fail
|
failurePolicy: Fail
|
||||||
matchConstraints:
|
matchConstraints:
|
||||||
@@ -48,14 +48,14 @@ spec:
|
|||||||
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
|
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
|
||||||
validations:
|
validations:
|
||||||
- expression: "object.metadata.namespace.startsWith('team-')"
|
- expression: "object.metadata.namespace.startsWith('team-')"
|
||||||
message: "Stages must be created in namespaces starting with 'team-'"
|
message: "Stages must be managed in namespaces starting with 'team-'"
|
||||||
---
|
---
|
||||||
apiVersion: admissionregistration.k8s.io/v1
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
kind: ValidatingAdmissionPolicyBinding
|
kind: ValidatingAdmissionPolicyBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: "force-stage-ns-prefix-for-stage-editor-binding"
|
name: "force-ns-prefix-for-stage-create-update-binding"
|
||||||
spec:
|
spec:
|
||||||
policyName: "force-stage-ns-prefix-for-stage-editor"
|
policyName: "force-ns-prefix-for-stage-create-update"
|
||||||
validationActions: [Deny]
|
validationActions: [Deny]
|
||||||
matchResources:
|
matchResources:
|
||||||
resourceRules:
|
resourceRules:
|
||||||
@@ -67,7 +67,7 @@ spec:
|
|||||||
apiVersion: admissionregistration.k8s.io/v1
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
kind: ValidatingAdmissionPolicy
|
kind: ValidatingAdmissionPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: "force-stage-ns-prefix-for-stage-editor-delete"
|
name: "force-ns-prefix-for-stage-editor-delete"
|
||||||
spec:
|
spec:
|
||||||
failurePolicy: Fail
|
failurePolicy: Fail
|
||||||
matchConstraints:
|
matchConstraints:
|
||||||
@@ -81,14 +81,14 @@ spec:
|
|||||||
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
|
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
|
||||||
validations:
|
validations:
|
||||||
- expression: "request.namespace.startsWith('team-')"
|
- expression: "request.namespace.startsWith('team-')"
|
||||||
message: "Stages must be created in namespaces starting with 'team-'"
|
message: "Stages must be managed in namespaces starting with 'team-'"
|
||||||
---
|
---
|
||||||
apiVersion: admissionregistration.k8s.io/v1
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
kind: ValidatingAdmissionPolicyBinding
|
kind: ValidatingAdmissionPolicyBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: "force-stage-ns-prefix-for-stage-editor-delete-binding"
|
name: "force-ns-prefix-for-stage-editor-delete-binding"
|
||||||
spec:
|
spec:
|
||||||
policyName: "force-stage-ns-prefix-for-stage-editor-delete"
|
policyName: "force-ns-prefix-for-stage-editor-delete"
|
||||||
validationActions: [Deny]
|
validationActions: [Deny]
|
||||||
matchResources:
|
matchResources:
|
||||||
resourceRules:
|
resourceRules:
|
||||||
|
|||||||
Reference in New Issue
Block a user