attest-provider/validation/attest-constraint.yaml

apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sAttestExternalData
metadata:
  name: deny-images-that-fail-policy
spec:
  enforcementAction: deny
  match:
    kinds:
      - apiGroups: ["*"]
        kinds: ["Pod"]
    namespaces: ["test"]
Initial commit 2024-05-23 10:19:55 -05:00			`apiVersion: constraints.gatekeeper.sh/v1beta1`
merge poc 2024-05-23 10:52:35 -05:00			`kind: K8sAttestExternalData`
Initial commit 2024-05-23 10:19:55 -05:00			`metadata:`
merge poc 2024-05-23 10:52:35 -05:00			`name: deny-images-that-fail-policy`
Initial commit 2024-05-23 10:19:55 -05:00			`spec:`
			`enforcementAction: deny`
			`match:`
			`kinds:`
			`- apiGroups: ["*"]`
			`kinds: ["Pod"]`
merge poc 2024-05-23 10:52:35 -05:00			`namespaces: ["test"]`