forked from GoogleCloudPlatform/gke-policy-library
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathkustomization.yaml
35 lines (35 loc) · 1.21 KB
/
kustomization.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Copyright 2023 Google LLC
#
# This is “Software” that is licensed under the “General Software” section of
# the Service Specific Terms (https://cloud.google.com/terms/service-terms) for
# usage in accordance with the following “Scope of Use”: This file may only be
# used on an Anthos cluster, including any associated ci/cd use. “Anthos
# cluster” is defined as “A Cluster (of any kind) registered to a fleet project
# where the Anthos API is enabled”.
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- apparmor.yaml
- asm-peer-authn-strict-mtls.yaml
- block-creation-with-default-serviceaccount.yaml
- block-secrets-of-type-basic-auth.yaml
- capabilities.yaml
- cpu-and-memory-limits-required.yaml
- enforce-config-management.yaml
- host-namespaces.yaml
- host-network.yaml
- nodes-have-consistent-time.yaml
- privileged-containers.yaml
- proc-mount-type.yaml
- require-binauthz.yaml
- require-managed-by-label.yaml
- require-namespace-network-policies.yaml
- restrict-clusteradmin-rolebindings.yaml
- restrict-hostpath-volumes.yaml
- restrict-rbac-subjects.yaml
- restrict-repos.yaml
- restrict-role-wildcards.yaml
- restrict-volume-types.yaml
- seccomp.yaml
- selinux.yaml
- sysctls.yaml