You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/ecosystem/integrations/kyverno.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -70,7 +70,7 @@ apiVersion: kyverno.io/v1
70
70
kind: ClusterPolicy
71
71
metadata:
72
72
name: tenant-workload-restrictions
73
-
spec:
73
+
spec:
74
74
validationFailureAction: Enforce
75
75
rules:
76
76
- name: block-daemonset-create
@@ -98,7 +98,7 @@ spec:
98
98
value: "true"
99
99
```
100
100
101
-
#### Disallow Scheduling on Controle Planes
101
+
#### Disallow Scheduling on Control Planes
102
102
103
103
If a Pods are not scoped to specific nodes, they could be scheduled on control plane nodes. You should disallow this by enforcing that Pods do not use tolerations for control plane nodes:
0 commit comments