rdemoraes

apiVersion: templates.gatekeeper.sh/v1beta1
kind: ConstraintTemplate
metadata:
  name: k8swhitelistedimages
spec:
  crd:
    spec:
      names:
        kind: k8sWhitelistedImages
      validation:

rdemoraes

apiVersion: constraints.gatekeeper.sh/v1beta1
kind: k8sWhitelistedImages
metadata:
  name: k8senforcewhitelistedimages
spec:
  match:
    kinds:
      - apiGroups: [""]
        kinds: ["Pod"]
  parameters:

rdemoraes

apiVersion: v1
kind: Pod
metadata:
  name: opa-test
  labels:
    role: opa-test
  namespace: default
spec:
  containers:
    - name: opa-test

rdemoraes

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: docker-entrypoint-sh
data:
  docker-entrypoint.sh: |
      #!/bin/bash
      set -e      # first arg is `-f` or `--some-option`
      if [ "${1:0:1}" = '-' ]; then

rdemoraes

---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: cassandra
  name: cassandra
spec:
  clusterIP: None
  ports:

rdemoraes

---
kind: Service
apiVersion: v1
metadata:
  labels:
    app: cassandra
  name: cassandra-nlb
  annotations:
    service.beta.kubernetes.io/aws-load-balancer-type: nlb
    service.beta.kubernetes.io/aws-load-balancer-internal: 0.0.0.0/0

rdemoraes

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: cassandra-rings
data:
  CASSANDRA_0_INITIAL_TOKEN: <token_number>, <token_number>,...
  CASSANDRA_1_INITIAL_TOKEN: <token_number>, <token_number>,...
  CASSANDRA_2_INITIAL_TOKEN: <token_number>, <token_number>,...

rdemoraes

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: cassandra-rings
  namespace: cassandra
data:
  CASSANDRA_0_INITIAL_TOKEN: <token_number>, <token_number>,...
  CASSANDRA_1_INITIAL_TOKEN: <token_number>, <token_number>,...
  CASSANDRA_2_INITIAL_TOKEN: <token_number>, <token_number>,...

rdemoraes

---
apiVersion: "apps/v1"
kind: StatefulSet
metadata:
  name: cassandra
  namespace: cassandra
  labels:
    app: cassandra
spec:
  serviceName: cassandra

rdemoraes

{
    "Version": "2012–10–17",
    "Statement": [
       {
           "Effect": "Allow",
           "Action": [
               "s3:ListBucket",
               "s3:PutObject",
               "s3:GetObject",
               "s3:DeleteObject"