Policies

This page lists all Kyverno policies managed by the component. The list is autogenerated from the policy manifests which are rendered by the component.

The documentation page for each policy is also autogenerated from the policy manifests rendered by the component.

Policy Summary

disallow-reserved-namespaces

Disallow creation and editing of reserved namespaces

organization-namespaces

Ensure that all namespaces created by users have a label appuio.io/organization which isn’t empty.

organization-projects

Ensure that all OpenShift Projects created by users have a label appuio.io/organization which isn’t empty.

organization-sa-namespaces

Ensure that all namespaces created by organization serviceaccounts have a label appuio.io/organization which isn’t empty.

validate-namespace-metadata

Disallow auxiliary labels and annotations

organization-in-projectrequests

Check the requesting user’s default organization for OpenShift ProjectRequests.

quota-and-limit-range-in-ns

Create ResourceQuota and LimitRange objects in organization namespaces.

check-namespace-quota

Check and enforce namespace quotas for organizations

set-runonce-activedeadlineseconds

Set activeDeadlineSeconds for run-once pods.