3095530d0d
* feat(opa): add untrusted image check and update webhook configuration * fix: add separator before untrusted pod check ConfigMap * fix: remove specific image checks from untrusted pod validation * fix: remove specific image checks from untrusted pod validation * feat: add priority class and node affinity for OPA deployment
47 lines
884 B
YAML
47 lines
884 B
YAML
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
annotations:
|
|
kubesphere.io/creator: '{{ .Values.user.name }}'
|
|
labels:
|
|
kubesphere.io/workspace: system-workspace
|
|
name: os-network
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
annotations:
|
|
kubesphere.io/creator: '{{ .Values.user.name }}'
|
|
labels:
|
|
kubesphere.io/workspace: system-workspace
|
|
openpolicyagent.org/webhook: ignore
|
|
name: os-platform
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
annotations:
|
|
kubesphere.io/creator: '{{ .Values.user.name }}'
|
|
labels:
|
|
kubesphere.io/workspace: system-workspace
|
|
openpolicyagent.org/webhook: ignore
|
|
name: os-framework
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
annotations:
|
|
kubesphere.io/creator: '{{ .Values.user.name }}'
|
|
labels:
|
|
kubesphere.io/workspace: system-workspace
|
|
openpolicyagent.org/webhook: ignore
|
|
name: os-protected
|
|
|
|
|
|
|