华为云UCS-k8srequiredlabels:策略实例示例

时间:2024-01-05 16:50:38

策略实例示例

以下策略实例展示了策略定义生效的资源类型,parameters中指定了提示信息message以及label的约束定义。

apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sRequiredLabels
metadata:
  name: all-must-have-owner
spec:
  match:
    kinds:
      - apiGroups: [""]
        kinds: ["Namespace"]
  parameters:
    message: "All namespaces must have an `owner` label that points to your company username"
    labels:
      - key: owner
        allowedRegex: "^[a-zA-Z]+.agilebank.demo$"
support.huaweicloud.com/usermanual-ucs/ucs_01_0232.html