华为云UCS-k8sdisallowanonymous:策略实例示例

时间：2024-01-05 16:50:36

华为云UCS

策略实例示例

示例展示了ClusterRole和Role资源仅能关联到allowedRoles中定义的Role。

apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sDisallowAnonymous
metadata:
  name: no-anonymous
spec:
  match:
    kinds:
      - apiGroups: ["rbac.authorization.k8s.io"]
        kinds: ["ClusterRoleBinding"]
      - apiGroups: ["rbac.authorization.k8s.io"]
        kinds: ["RoleBinding"]
  parameters:
    allowedRoles: 
      - cluster-role-1

上一篇：华为云UCS-k8sdisallowanonymous:符合策略实例的资源定义

下一篇：华为云UCS-k8sdisallowanonymous:不符合策略实例的资源定义