3 changed files with 55 additions and 0 deletions
@ -0,0 +1,29 @@ |
|||
apiVersion: compliance.mcm.ibm.com/v1alpha1 |
|||
kind: Compliance |
|||
metadata: |
|||
name: compliance1 |
|||
namespace: mcm |
|||
spec: |
|||
runtime-rules: |
|||
- apiVersion: policy.mcm.ibm.com/v1alpha1 |
|||
kind: Policy |
|||
metadata: |
|||
name: policy01 |
|||
spec: |
|||
remediationAction: "enforce" # or inform |
|||
namespaces: |
|||
include: ["default"] |
|||
exclude: ["kube*"] |
|||
role-templates: |
|||
- kind: RoleTemplate |
|||
apiVersion: roletemplate.mcm.ibm.com/v1alpha1 |
|||
complianceType: "musthave" # at this level, it means the role must exist with the rules that it musthave below |
|||
metadata: |
|||
namespace: "" # will be inferred |
|||
name: operator |
|||
rules: |
|||
- complianceType: "musthave" # at this level, it means if the role exists the rule is a musthave |
|||
policyRule: |
|||
apiGroups: ["extensions", "apps"] |
|||
resources: ["deployments"] |
|||
verbs: ["get", "list", "watch", "create", "delete","patch"] |
@ -0,0 +1,14 @@ |
|||
apiVersion: mcm.ibm.com/v1alpha1 |
|||
kind: PlacementPolicy |
|||
metadata: |
|||
name: placement1 |
|||
namespace: mcm |
|||
spec: |
|||
clusterNames: |
|||
- "icp3" |
|||
# clusterLabels: |
|||
# matchLabels: |
|||
# cloud: "IBM" |
|||
# clusterConditions: |
|||
# - type: "OK" |
|||
# status: "True" |
@ -0,0 +1,12 @@ |
|||
apiVersion: mcm.ibm.com/v1alpha1 |
|||
kind: PlacementBinding |
|||
metadata: |
|||
name: binding1 |
|||
namespace: mcm |
|||
placementRef: |
|||
name: placement1 |
|||
subjects: |
|||
- name: compliance1 |
|||
kind: Compliance |
|||
- name: deployable-simple |
|||
kind: DestinationPolicy |
Loading…
Reference in new issue