Safeguard Reject Pod Without Controller Schema¶
Note
This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.
Return to the root config schema
https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/main/config/schemas/config.yaml#/properties/opa/properties/rejectPodWithoutController
Configure constraint to reject pods without a controller.
Note
See the dev docs for context.
| Abstract | Extensible | Status | Identifiable | Custom Properties | Additional Properties | Access Restrictions | Defined In |
|---|---|---|---|---|---|---|---|
| Can be instantiated | No | Unknown status | No | Forbidden | Forbidden | none | config/schemas/config.yaml* |
TYPE:
object (Safeguard Reject Pod Without Controller)
PROPERTIES:
| Property | Type | Required | Nullable | Defined by |
|---|---|---|---|---|
| enabled | boolean |
Optional | cannot be null | Welkin Apps Config |
| enforcement | string |
Optional | cannot be null | Welkin Apps Config |
enabled¶
enabled
-
is optional
-
Type:
boolean(Safeguard Reject Pod Without Controller Enabled) -
cannot be null
-
defined in: Welkin Apps Config
TYPE:
boolean (Safeguard Reject Pod Without Controller Enabled)
enforcement¶
enforcement
-
is optional
-
Type:
string(Safeguard Reject Pod Without Controller Enforcement) -
cannot be null
-
defined in: Welkin Apps Config
TYPE:
string (Safeguard Reject Pod Without Controller Enforcement)
CONSTRAINTS:
enum: the value of this property must be equal to one of the following values:
| Value | Explanation |
|---|---|
"deny" |
Deny actions violating the constraint. |
"warn" |
Warn actions violating the constraint. |
"dryrun" |
Dryrun actions violating the constraint. |
DEFAULTS:
The default value is:
"warn"
Return to the root config schema
Generated Sat Feb 22 03:48:16 UTC 2025 from elastisys/compliantkubernetes-apps@main