jwetzell/ontime-k8s
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cleanup naming

Browse Source
This commit is contained in:
Joel Wetzell
2025-10-29 06:53:38 -05:00
parent bef187c121
commit 8500e6a126
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
infrastructure/ontime-operator/namespace-prefix-policy.yaml
View File

@@ -34,7 +34,7 @@ spec:
apiVersion: admissionregistration.k8s.io/v1 apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicy kind: ValidatingAdmissionPolicy
metadata: metadata:
name: "force-stage-ns-prefix-for-stage-editor" name: "force-ns-prefix-for-stage-create-update"
spec: spec:
failurePolicy: Fail failurePolicy: Fail
matchConstraints: matchConstraints:
@@ -48,14 +48,14 @@ spec:
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'" expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
validations: validations:
- expression: "object.metadata.namespace.startsWith('team-')" - expression: "object.metadata.namespace.startsWith('team-')"
message: "Stages must be created in namespaces starting with 'team-'" message: "Stages must be managed in namespaces starting with 'team-'"
--- ---
apiVersion: admissionregistration.k8s.io/v1 apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding kind: ValidatingAdmissionPolicyBinding
metadata: metadata:
name: "force-stage-ns-prefix-for-stage-editor-binding" name: "force-ns-prefix-for-stage-create-update-binding"
spec: spec:
policyName: "force-stage-ns-prefix-for-stage-editor" policyName: "force-ns-prefix-for-stage-create-update"
validationActions: [Deny] validationActions: [Deny]
matchResources: matchResources:
resourceRules: resourceRules:
@@ -67,7 +67,7 @@ spec:
apiVersion: admissionregistration.k8s.io/v1 apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicy kind: ValidatingAdmissionPolicy
metadata: metadata:
name: "force-stage-ns-prefix-for-stage-editor-delete" name: "force-ns-prefix-for-stage-editor-delete"
spec: spec:
failurePolicy: Fail failurePolicy: Fail
matchConstraints: matchConstraints:
@@ -81,14 +81,14 @@ spec:
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'" expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
validations: validations:
- expression: "request.namespace.startsWith('team-')" - expression: "request.namespace.startsWith('team-')"
message: "Stages must be created in namespaces starting with 'team-'" message: "Stages must be managed in namespaces starting with 'team-'"
--- ---
apiVersion: admissionregistration.k8s.io/v1 apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding kind: ValidatingAdmissionPolicyBinding
metadata: metadata:
name: "force-stage-ns-prefix-for-stage-editor-delete-binding" name: "force-ns-prefix-for-stage-editor-delete-binding"
spec: spec:
policyName: "force-stage-ns-prefix-for-stage-editor-delete" policyName: "force-ns-prefix-for-stage-editor-delete"
validationActions: [Deny] validationActions: [Deny]
matchResources: matchResources:
resourceRules: resourceRules: