Skip to content

Instantly share code, notes, and snippets.

View aavarghese's full-sized avatar

Ansu Varghese aavarghese

View GitHub Profile
package kubernetes.admission
# METADATA
# scope: rule
# schemas:
# - input: schema["input"]
# - input.request.object: schema.kubernetes["pod"]
deny[msg] {
input.request.kind.kinds == "Pod" # This line has a typo, should be input.request.kind.kind
image := input.request.object.spec.containers[_].images # This line has a typo, should be input.request.object.spec.containers[_].image
package policy
import data.acl
default allow = false
# METADATA
# scope: rule
# schemas:
# - input: schema["input"]