Safeguard Restrict PodDisruptionBudget Schema¶
Note
This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.
Return to the root config schema
https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/main/config/schemas/config.yaml#/properties/opa/properties/restrictPodDisruptionBudgets
Configure constraint to reject PodDisruptionBudgets and connected Pod controllers if the PDB does not allow for at least 1 pod disruption.
Note
See the dev docs for context.
| Abstract | Extensible | Status | Identifiable | Custom Properties | Additional Properties | Access Restrictions | Defined In |
|---|---|---|---|---|---|---|---|
| Can be instantiated | No | Unknown status | No | Forbidden | Forbidden | none | config/schemas/config.yaml* |
TYPE:
object (Safeguard Restrict PodDisruptionBudget)
PROPERTIES:
| Property | Type | Required | Nullable | Defined by |
|---|---|---|---|---|
| enabled | boolean |
Optional | cannot be null | Welkin Apps Config |
| enforcement | string |
Optional | cannot be null | Welkin Apps Config |
enabled¶
enabled
-
is optional
-
Type:
boolean(Safeguard Restrict PodDisruptionBudget Enabled) -
cannot be null
-
defined in: Welkin Apps Config
TYPE:
boolean (Safeguard Restrict PodDisruptionBudget Enabled)
DEFAULTS:
The default value is:
true
enforcement¶
enforcement
-
is optional
-
Type:
string(Safeguard Restrict PodDisruptionBudget Enforcement) -
cannot be null
-
defined in: Welkin Apps Config
TYPE:
string (Safeguard Restrict PodDisruptionBudget Enforcement)
CONSTRAINTS:
enum: the value of this property must be equal to one of the following values:
| Value | Explanation |
|---|---|
"deny" |
Deny actions violating the constraint. |
"warn" |
Warn actions violating the constraint. |
"dryrun" |
Dryrun actions violating the constraint. |
DEFAULTS:
The default value is:
"deny"
Return to the root config schema
Generated Wed Apr 2 03:52:56 UTC 2025 from elastisys/compliantkubernetes-apps@main