kubelatte-ce

1

2
spec:
3
  items:
4
    - match:
5
        kinds:
6
          - apiGroups:
7
              - .*
8
            kinds:
9
              - RoleBinding
10
        namespaces:
11
          - kblt-inspector-dev
12
        operations:
13
          - CREATE
14
      name: roles-validation-policy
15
      rule:
16
        rego:
17
          parameters: |-
18
            affectedServiceAccounts:
19
              - ".*"
20
            allowedNamespaces:
21
              - kblt-inspector-dev
22
            serviceAccounts:
23
              - name: default
24
                roles:
25
                  - pod-reader
26
          template: kblt-inspector-dev/rego-rolebinding
27
  type: validation
28