diff --git a/apps/stage-maker/namespace-prefix-policy.yaml b/apps/stage-maker/namespace-prefix-policy.yaml index ceabf97..7cf1c08 100644 --- a/apps/stage-maker/namespace-prefix-policy.yaml +++ b/apps/stage-maker/namespace-prefix-policy.yaml @@ -14,8 +14,8 @@ spec: - name: 'only-stage-editor' expression: "request.userInfo.username == 'system:serviceaccount:stage-maker:stage-editor'" validations: - - expression: "object.metadata.namespace.startsWith('team-')" - message: "All namespace requests by stage-editor must start with 'team-'" + - expression: "object.metadata.name.startsWith('team-')" + message: "All namespaces managed by stage-editor must start with 'team-'" --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicyBinding