3 changed files with 0 additions and 55 deletions
@ -1,29 +0,0 @@ |
|||||
apiVersion: compliance.mcm.ibm.com/v1alpha1 |
|
||||
kind: Compliance |
|
||||
metadata: |
|
||||
name: compliance1 |
|
||||
namespace: mcm |
|
||||
spec: |
|
||||
runtime-rules: |
|
||||
- apiVersion: policy.mcm.ibm.com/v1alpha1 |
|
||||
kind: Policy |
|
||||
metadata: |
|
||||
name: policy01 |
|
||||
spec: |
|
||||
remediationAction: "enforce" # or inform |
|
||||
namespaces: |
|
||||
include: ["default"] |
|
||||
exclude: ["kube*"] |
|
||||
role-templates: |
|
||||
- kind: RoleTemplate |
|
||||
apiVersion: roletemplate.mcm.ibm.com/v1alpha1 |
|
||||
complianceType: "musthave" # at this level, it means the role must exist with the rules that it musthave below |
|
||||
metadata: |
|
||||
namespace: "" # will be inferred |
|
||||
name: operator |
|
||||
rules: |
|
||||
- complianceType: "musthave" # at this level, it means if the role exists the rule is a musthave |
|
||||
policyRule: |
|
||||
apiGroups: ["extensions", "apps"] |
|
||||
resources: ["deployments"] |
|
||||
verbs: ["get", "list", "watch", "create", "delete","patch"] |
|
@ -1,14 +0,0 @@ |
|||||
apiVersion: mcm.ibm.com/v1alpha1 |
|
||||
kind: PlacementPolicy |
|
||||
metadata: |
|
||||
name: placement1 |
|
||||
namespace: mcm |
|
||||
spec: |
|
||||
clusterNames: |
|
||||
- "icp3" |
|
||||
# clusterLabels: |
|
||||
# matchLabels: |
|
||||
# cloud: "IBM" |
|
||||
# clusterConditions: |
|
||||
# - type: "OK" |
|
||||
# status: "True" |
|
@ -1,12 +0,0 @@ |
|||||
apiVersion: mcm.ibm.com/v1alpha1 |
|
||||
kind: PlacementBinding |
|
||||
metadata: |
|
||||
name: binding1 |
|
||||
namespace: mcm |
|
||||
placementRef: |
|
||||
name: placement1 |
|
||||
subjects: |
|
||||
- name: compliance1 |
|
||||
kind: Compliance |
|
||||
- name: deployable-simple |
|
||||
kind: DestinationPolicy |
|
Loading…
Reference in new issue