Shubhanjan Medhi ShubhanjanMedhi-dev

## kubectl_apply_2.sh
$ kubectl apply -f mutating_policy.yaml

## kubectl_createDeployment_1.sh
$ kubectl create deployment mutate-test --image=nginx

## kubectl_getDeploy.sh
$ kubectl get deploy --show-labels

## kubectl_kyverno.sh
$ kubectl -n kyverno logs -l app.kubernetes.io/component=kyverno

## generating_policy.yaml
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: add-namespace-limit
spec:
  rules:
  - name: namespace-limit
    match:
      resources:
        kinds:

## kubectl_apply_3.sh
$ kubectl apply -f generating_policy.yaml

## kubectl_createNamespace.sh
$ kubectl create namespace development

## kubectl-n.sh
$ kubectl -n development describe limitrange

## kubernetes_role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: default
  name: pod-reader
rules:
- apiGroups: [""] # "" indicates the core API group
  resources: ["pods"]
  verbs: ["get", "watch", "list"]

## kubernetes_roleBinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
namespace.
kind: RoleBinding
metadata:
  name: read-pods
  namespace: default
subjects:
- kind: User
  name: jane
  apiGroup: rbac.authorization.k8s.io
	apiVersion: kyverno.io/v1
	kind: ClusterPolicy
	metadata:
	name: add-namespace-limit
	spec:
	rules:
	- name: namespace-limit
	match:
	resources:
	kinds:
	apiVersion: rbac.authorization.k8s.io/v1
	kind: Role
	metadata:
	namespace: default
	name: pod-reader
	rules:
	- apiGroups: [""] # "" indicates the core API group
	resources: ["pods"]
	verbs: ["get", "watch", "list"]
	apiVersion: rbac.authorization.k8s.io/v1
	namespace.
	kind: RoleBinding
	metadata:
	name: read-pods
	namespace: default
	subjects:
	- kind: User
	name: jane
	apiGroup: rbac.authorization.k8s.io