17 lines
508 B
YAML
17 lines
508 B
YAML
apiVersion: admissionregistration.k8s.io/v1alpha1
|
|
kind: ValidatingAdmissionPolicy
|
|
metadata:
|
|
name: "demo-policy.example.com"
|
|
spec:
|
|
failurePolicy: Fail
|
|
matchConstraints:
|
|
resourceRules:
|
|
- apiGroups: ["apps"]
|
|
apiVersions: ["v1"]
|
|
operations: ["CREATE", "UPDATE"]
|
|
resources: ["deployments"]
|
|
validations:
|
|
- key: "high-replica-count"
|
|
expression: "object.spec.replicas > 50"
|
|
messageExpression: "'Deployment spec.replicas set to ' + string(object.spec.replicas)"
|