Skip to content

Commit 4af2e0c

Browse files
authored
fix(kyverno): typo (#50)
Signed-off-by: sandert-k8s <sandert98@gmail.com>
1 parent 90d6ff0 commit 4af2e0c

1 file changed

Lines changed: 9 additions & 9 deletions

File tree

content/en/ecosystem/integrations/kyverno.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ apiVersion: kyverno.io/v1
7070
kind: ClusterPolicy
7171
metadata:
7272
name: tenant-workload-restrictions
73-
spec:
73+
spec:
7474
validationFailureAction: Enforce
7575
rules:
7676
- name: block-daemonset-create
@@ -98,7 +98,7 @@ spec:
9898
value: "true"
9999
```
100100

101-
#### Disallow Scheduling on Controle Planes
101+
#### Disallow Scheduling on Control Planes
102102

103103
If a Pods are not scoped to specific nodes, they could be scheduled on control plane nodes. You should disallow this by enforcing that Pods do not use tolerations for control plane nodes:
104104

@@ -107,7 +107,7 @@ apiVersion: kyverno.io/v1
107107
kind: ClusterPolicy
108108
metadata:
109109
name: tenant-workload-restrictions
110-
spec:
110+
spec:
111111
validationFailureAction: Enforce
112112
rules:
113113
- name: restrict-controlplane-scheduling-master
@@ -429,7 +429,7 @@ spec:
429429
urlPath: "/api/v1/namespaces/{{request.object.spec.targetNamespace}}"
430430
jmesPath: "metadata.labels.\"capsule.clastix.io/tenant\""
431431
432-
# Get tenant based on resource namespace
432+
# Get tenant based on resource namespace
433433
- name: source_tenant
434434
apiCall:
435435
urlPath: "/api/v1/namespaces/{{request.object.metadata.namespace}}"
@@ -505,7 +505,7 @@ spec:
505505
- name: public_namespaces
506506
apiCall:
507507
urlPath: "/api/v1/namespaces"
508-
jmesPath: "items[?metadata.labels.\"{{global.data.public_identifier_label}}\" == '{{global.data.public_identifier_value}}'].metadata.name | []"
508+
jmesPath: "items[?metadata.labels.\"{{global.data.public_identifier_label}}\" == '{{global.data.public_identifier_value}}'].metadata.name | []"
509509
510510
# Get Tenant information from source namespace
511511
# Defaults to a character, which can't be a label value
@@ -526,8 +526,8 @@ spec:
526526
- key: "{{request.object.spec.targetNamespace}}"
527527
operator: NotIn
528528
values: [ "{{request.object.metadata.namespace}}" ]
529-
any:
530-
# Source is not Self-Reference
529+
any:
530+
# Source is not Self-Reference
531531
- key: "{{request.object.spec.targetNamespace}}"
532532
operator: NotEquals
533533
value: "{{request.object.metadata.namespace}}"
@@ -622,7 +622,7 @@ spec:
622622
path: "/spec/nodeSelector"
623623
value:
624624
nodepool: "workers"
625-
625+
626626
627627
628628
```
@@ -695,4 +695,4 @@ spec:
695695
- kind: Nodes
696696
operations:
697697
- List
698-
```
698+
```

0 commit comments

Comments
 (0)