43 lines
976 B
YAML
43 lines
976 B
YAML
apiVersion: policy.open-cluster-management.io/v1
|
|
kind: PolicyGenerator
|
|
metadata:
|
|
name: kyverno-security
|
|
placementBindingDefaults:
|
|
name: kyverno-security
|
|
policyDefaults:
|
|
policyAnnotations: {"policy.open-cluster-management.io/disable-templates": "true"}
|
|
categories:
|
|
- CM Configuration Management
|
|
controls:
|
|
- CM-2 Baseline Configuration
|
|
namespace: kyverno-policies
|
|
remediationAction: enforce
|
|
severity: medium
|
|
policySets:
|
|
- kyverno-security
|
|
standards:
|
|
- generic
|
|
generatePlacementWhenInSet: false
|
|
policies:
|
|
- name: disallow-scc-anyuid
|
|
categories:
|
|
- setup
|
|
controls:
|
|
- setup
|
|
disabled: false
|
|
manifests:
|
|
- path: policies/disallow-anyuid-scc-policy.yaml
|
|
- name: require-tls-routes
|
|
categories:
|
|
- setup
|
|
controls:
|
|
- setup
|
|
disabled: false
|
|
manifests:
|
|
- path: policies/require-tls-routes.yaml
|
|
policySets:
|
|
- description: Kyverno Security
|
|
name: kyverno-security
|
|
placement:
|
|
placementRuleName: kyverno
|