@pulumi/kubernetes-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
396 lines (395 loc) • 23.7 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.ValidatingAdmissionPolicyPatch = exports.ValidatingAdmissionPolicyList = exports.ValidatingAdmissionPolicyBindingPatch = exports.ValidatingAdmissionPolicyBindingList = exports.ValidatingAdmissionPolicyBinding = exports.ValidatingAdmissionPolicy = exports.MutatingAdmissionPolicyPatch = exports.MutatingAdmissionPolicyList = exports.MutatingAdmissionPolicyBindingPatch = exports.MutatingAdmissionPolicyBindingList = exports.MutatingAdmissionPolicyBinding = exports.MutatingAdmissionPolicy = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1alpha1_1 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_2 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_3 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_4 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_5 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_6 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_7 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_8 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_9 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_10 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_11 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
const v1alpha1_12 = require("@pulumi/kubernetes/admissionregistration/v1alpha1");
var MutatingAdmissionPolicy;
(function (MutatingAdmissionPolicy) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicy).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicy-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_1.MutatingAdmissionPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicy shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicy).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicy || (MutatingAdmissionPolicy = {}));
exports.MutatingAdmissionPolicy = MutatingAdmissionPolicy;
var MutatingAdmissionPolicyBinding;
(function (MutatingAdmissionPolicyBinding) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicyBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicybinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_2.MutatingAdmissionPolicyBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicyBinding shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicyBinding).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicyBinding || (MutatingAdmissionPolicyBinding = {}));
exports.MutatingAdmissionPolicyBinding = MutatingAdmissionPolicyBinding;
var MutatingAdmissionPolicyBindingList;
(function (MutatingAdmissionPolicyBindingList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicyBindingList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicybindinglist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_3.MutatingAdmissionPolicyBindingList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicyBindingList shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingList).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicyBindingList || (MutatingAdmissionPolicyBindingList = {}));
exports.MutatingAdmissionPolicyBindingList = MutatingAdmissionPolicyBindingList;
var MutatingAdmissionPolicyBindingPatch;
(function (MutatingAdmissionPolicyBindingPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicyBindingPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicybindingpatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_4.MutatingAdmissionPolicyBindingPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicyBindingPatch shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingPatch).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicyBindingPatch || (MutatingAdmissionPolicyBindingPatch = {}));
exports.MutatingAdmissionPolicyBindingPatch = MutatingAdmissionPolicyBindingPatch;
var MutatingAdmissionPolicyList;
(function (MutatingAdmissionPolicyList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicyList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicylist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_5.MutatingAdmissionPolicyList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicyList shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicyList).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicyList || (MutatingAdmissionPolicyList = {}));
exports.MutatingAdmissionPolicyList = MutatingAdmissionPolicyList;
var MutatingAdmissionPolicyPatch;
(function (MutatingAdmissionPolicyPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
MutatingAdmissionPolicyPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-mutatingadmissionpolicypatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.MutatingAdmissionPolicyPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_6.MutatingAdmissionPolicyPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes MutatingAdmissionPolicyPatch shouldn't use an unstable API (admissionregistration.v1alpha1.MutatingAdmissionPolicyPatch).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MutatingAdmissionPolicyPatch || (MutatingAdmissionPolicyPatch = {}));
exports.MutatingAdmissionPolicyPatch = MutatingAdmissionPolicyPatch;
var ValidatingAdmissionPolicy;
(function (ValidatingAdmissionPolicy) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicy).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicy-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_7.ValidatingAdmissionPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicy shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicy).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicy || (ValidatingAdmissionPolicy = {}));
exports.ValidatingAdmissionPolicy = ValidatingAdmissionPolicy;
var ValidatingAdmissionPolicyBinding;
(function (ValidatingAdmissionPolicyBinding) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicyBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicybinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_8.ValidatingAdmissionPolicyBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicyBinding shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicyBinding || (ValidatingAdmissionPolicyBinding = {}));
exports.ValidatingAdmissionPolicyBinding = ValidatingAdmissionPolicyBinding;
var ValidatingAdmissionPolicyBindingList;
(function (ValidatingAdmissionPolicyBindingList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicyBindingList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicybindinglist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_9.ValidatingAdmissionPolicyBindingList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicyBindingList shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingList).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicyBindingList || (ValidatingAdmissionPolicyBindingList = {}));
exports.ValidatingAdmissionPolicyBindingList = ValidatingAdmissionPolicyBindingList;
var ValidatingAdmissionPolicyBindingPatch;
(function (ValidatingAdmissionPolicyBindingPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicyBindingPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicybindingpatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_10.ValidatingAdmissionPolicyBindingPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicyBindingPatch shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingPatch).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicyBindingPatch || (ValidatingAdmissionPolicyBindingPatch = {}));
exports.ValidatingAdmissionPolicyBindingPatch = ValidatingAdmissionPolicyBindingPatch;
var ValidatingAdmissionPolicyList;
(function (ValidatingAdmissionPolicyList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicyList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicylist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_11.ValidatingAdmissionPolicyList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicyList shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicyList).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicyList || (ValidatingAdmissionPolicyList = {}));
exports.ValidatingAdmissionPolicyList = ValidatingAdmissionPolicyList;
var ValidatingAdmissionPolicyPatch;
(function (ValidatingAdmissionPolicyPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ValidatingAdmissionPolicyPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-admissionregistration-v1alpha1-validatingadmissionpolicypatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (admissionregistration.v1alpha1.ValidatingAdmissionPolicyPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha1_12.ValidatingAdmissionPolicyPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ValidatingAdmissionPolicyPatch shouldn't use an unstable API (admissionregistration.v1alpha1.ValidatingAdmissionPolicyPatch).");
}),
},
vendors: ["kubernetes"],
services: ["admissionregistration"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ValidatingAdmissionPolicyPatch || (ValidatingAdmissionPolicyPatch = {}));
exports.ValidatingAdmissionPolicyPatch = ValidatingAdmissionPolicyPatch;