@pulumi/kubernetes-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
35 lines (34 loc) • 1.09 kB
TypeScript
import { ResourceValidationPolicy } from "@pulumi/policy";
declare namespace Pod {
/**
* Checks that Kubernetes Pods are not used directly.
*
* @severity critical
* @frameworks none
* @topics availability
* @link https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
*/
const disallowPod: ResourceValidationPolicy;
}
export { Pod };
declare namespace Service {
/**
* Checks that Kubernetes Services use the recommended labels.
*
* @severity low
* @frameworks none
* @topics usability
* @link https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/
*/
const configureRecommendedLabels: ResourceValidationPolicy;
/**
* Checks that Kubernetes Services do not use a LoadBalancer as service type.
*
* @severity low
* @frameworks none
* @topics cost, network
* @link https://github.com/datreeio/datree/blob/main/examples/Cost_Reduction/README.md
*/
const disallowLoadBalancer: ResourceValidationPolicy;
}
export { Service };