Skip to content

Safeguard Reject Load Balancer Service Schema

Note

This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.

Return to the root config schema

https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/main/config/schemas/config.yaml#/properties/opa/properties/rejectLoadBalancerService

Configure constraint to reject creation of Services with the type LoadBalancer.

Advantageous if the cluster cannot automatically provision LoadBalancers, e.g. because the infrastructure provider do not offer such Kubernetes integration.

Note

See the dev docs for context.

Abstract Extensible Status Identifiable Custom Properties Additional Properties Access Restrictions Defined In
Can be instantiated No Unknown status No Forbidden Forbidden none config/schemas/config.yaml*

TYPE:

object (Safeguard Reject Load Balancer Service)

PROPERTIES:

Property Type Required Nullable Defined by
enabled boolean Optional cannot be null Welkin Apps Config
enforcement string Optional cannot be null Welkin Apps Config

enabled

enabled

TYPE:

boolean (Safeguard Reject Load Balancer Service Enabled)

enforcement

enforcement

TYPE:

string (Safeguard Reject Load Balancer Service Enforcement)

CONSTRAINTS:

enum: the value of this property must be equal to one of the following values:

Value Explanation
"deny" Deny actions violating the constraint.
"warn" Warn actions violating the constraint.
"dryrun" Dryrun actions violating the constraint.

DEFAULTS:

The default value is:

"deny"

Return to the root config schema


Generated Thu Dec 19 03:51:01 UTC 2024 from elastisys/compliantkubernetes-apps@main