@pulumi/kubernetes-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
675 lines (674 loc) • 36.3 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.ResourceSlicePatch = exports.ResourceSliceList = exports.ResourceSlice = exports.ResourceClassPatch = exports.ResourceClassParametersPatch = exports.ResourceClassParametersList = exports.ResourceClassParameters = exports.ResourceClassList = exports.ResourceClass = exports.ResourceClaimTemplatePatch = exports.ResourceClaimTemplateList = exports.ResourceClaimTemplate = exports.ResourceClaimPatch = exports.ResourceClaimParametersPatch = exports.ResourceClaimParametersList = exports.ResourceClaimParameters = exports.ResourceClaimList = exports.ResourceClaim = exports.PodSchedulingContextPatch = exports.PodSchedulingContextList = exports.PodSchedulingContext = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1alpha2_1 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_2 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_3 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_4 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_5 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_6 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_7 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_8 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_9 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_10 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_11 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_12 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_13 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_14 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_15 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_16 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_17 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_18 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_19 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_20 = require("@pulumi/kubernetes/resource/v1alpha2");
const v1alpha2_21 = require("@pulumi/kubernetes/resource/v1alpha2");
var PodSchedulingContext;
(function (PodSchedulingContext) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContext).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
PodSchedulingContext.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-podschedulingcontext-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContext).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_1.PodSchedulingContext, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes PodSchedulingContext shouldn't use an unstable API (resource.v1alpha2.PodSchedulingContext).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(PodSchedulingContext || (PodSchedulingContext = {}));
exports.PodSchedulingContext = PodSchedulingContext;
var PodSchedulingContextList;
(function (PodSchedulingContextList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContextList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
PodSchedulingContextList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-podschedulingcontextlist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContextList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_2.PodSchedulingContextList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes PodSchedulingContextList shouldn't use an unstable API (resource.v1alpha2.PodSchedulingContextList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(PodSchedulingContextList || (PodSchedulingContextList = {}));
exports.PodSchedulingContextList = PodSchedulingContextList;
var PodSchedulingContextPatch;
(function (PodSchedulingContextPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContextPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
PodSchedulingContextPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-podschedulingcontextpatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.PodSchedulingContextPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_3.PodSchedulingContextPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes PodSchedulingContextPatch shouldn't use an unstable API (resource.v1alpha2.PodSchedulingContextPatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(PodSchedulingContextPatch || (PodSchedulingContextPatch = {}));
exports.PodSchedulingContextPatch = PodSchedulingContextPatch;
var ResourceClaim;
(function (ResourceClaim) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaim).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaim.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaim-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaim).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_4.ResourceClaim, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaim shouldn't use an unstable API (resource.v1alpha2.ResourceClaim).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaim || (ResourceClaim = {}));
exports.ResourceClaim = ResourceClaim;
var ResourceClaimList;
(function (ResourceClaimList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimlist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_5.ResourceClaimList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimList shouldn't use an unstable API (resource.v1alpha2.ResourceClaimList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimList || (ResourceClaimList = {}));
exports.ResourceClaimList = ResourceClaimList;
var ResourceClaimParameters;
(function (ResourceClaimParameters) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParameters).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimParameters.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimparameters-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParameters).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_6.ResourceClaimParameters, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimParameters shouldn't use an unstable API (resource.v1alpha2.ResourceClaimParameters).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimParameters || (ResourceClaimParameters = {}));
exports.ResourceClaimParameters = ResourceClaimParameters;
var ResourceClaimParametersList;
(function (ResourceClaimParametersList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParametersList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimParametersList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimparameterslist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParametersList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_7.ResourceClaimParametersList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimParametersList shouldn't use an unstable API (resource.v1alpha2.ResourceClaimParametersList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimParametersList || (ResourceClaimParametersList = {}));
exports.ResourceClaimParametersList = ResourceClaimParametersList;
var ResourceClaimParametersPatch;
(function (ResourceClaimParametersPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParametersPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimParametersPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimparameterspatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimParametersPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_8.ResourceClaimParametersPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimParametersPatch shouldn't use an unstable API (resource.v1alpha2.ResourceClaimParametersPatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimParametersPatch || (ResourceClaimParametersPatch = {}));
exports.ResourceClaimParametersPatch = ResourceClaimParametersPatch;
var ResourceClaimPatch;
(function (ResourceClaimPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimpatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_9.ResourceClaimPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimPatch shouldn't use an unstable API (resource.v1alpha2.ResourceClaimPatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimPatch || (ResourceClaimPatch = {}));
exports.ResourceClaimPatch = ResourceClaimPatch;
var ResourceClaimTemplate;
(function (ResourceClaimTemplate) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplate).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimTemplate.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimtemplate-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplate).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_10.ResourceClaimTemplate, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimTemplate shouldn't use an unstable API (resource.v1alpha2.ResourceClaimTemplate).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimTemplate || (ResourceClaimTemplate = {}));
exports.ResourceClaimTemplate = ResourceClaimTemplate;
var ResourceClaimTemplateList;
(function (ResourceClaimTemplateList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplateList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimTemplateList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimtemplatelist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplateList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_11.ResourceClaimTemplateList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimTemplateList shouldn't use an unstable API (resource.v1alpha2.ResourceClaimTemplateList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimTemplateList || (ResourceClaimTemplateList = {}));
exports.ResourceClaimTemplateList = ResourceClaimTemplateList;
var ResourceClaimTemplatePatch;
(function (ResourceClaimTemplatePatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplatePatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClaimTemplatePatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclaimtemplatepatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClaimTemplatePatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_12.ResourceClaimTemplatePatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClaimTemplatePatch shouldn't use an unstable API (resource.v1alpha2.ResourceClaimTemplatePatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClaimTemplatePatch || (ResourceClaimTemplatePatch = {}));
exports.ResourceClaimTemplatePatch = ResourceClaimTemplatePatch;
var ResourceClass;
(function (ResourceClass) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClass).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClass.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclass-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClass).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_13.ResourceClass, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClass shouldn't use an unstable API (resource.v1alpha2.ResourceClass).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClass || (ResourceClass = {}));
exports.ResourceClass = ResourceClass;
var ResourceClassList;
(function (ResourceClassList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClassList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclasslist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_14.ResourceClassList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClassList shouldn't use an unstable API (resource.v1alpha2.ResourceClassList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClassList || (ResourceClassList = {}));
exports.ResourceClassList = ResourceClassList;
var ResourceClassParameters;
(function (ResourceClassParameters) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParameters).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClassParameters.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclassparameters-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParameters).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_15.ResourceClassParameters, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClassParameters shouldn't use an unstable API (resource.v1alpha2.ResourceClassParameters).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClassParameters || (ResourceClassParameters = {}));
exports.ResourceClassParameters = ResourceClassParameters;
var ResourceClassParametersList;
(function (ResourceClassParametersList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParametersList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClassParametersList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclassparameterslist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParametersList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_16.ResourceClassParametersList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClassParametersList shouldn't use an unstable API (resource.v1alpha2.ResourceClassParametersList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClassParametersList || (ResourceClassParametersList = {}));
exports.ResourceClassParametersList = ResourceClassParametersList;
var ResourceClassParametersPatch;
(function (ResourceClassParametersPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParametersPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClassParametersPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclassparameterspatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassParametersPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_17.ResourceClassParametersPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClassParametersPatch shouldn't use an unstable API (resource.v1alpha2.ResourceClassParametersPatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClassParametersPatch || (ResourceClassParametersPatch = {}));
exports.ResourceClassParametersPatch = ResourceClassParametersPatch;
var ResourceClassPatch;
(function (ResourceClassPatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassPatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceClassPatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceclasspatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceClassPatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_18.ResourceClassPatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceClassPatch shouldn't use an unstable API (resource.v1alpha2.ResourceClassPatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceClassPatch || (ResourceClassPatch = {}));
exports.ResourceClassPatch = ResourceClassPatch;
var ResourceSlice;
(function (ResourceSlice) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSlice).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceSlice.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceslice-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSlice).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_19.ResourceSlice, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceSlice shouldn't use an unstable API (resource.v1alpha2.ResourceSlice).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceSlice || (ResourceSlice = {}));
exports.ResourceSlice = ResourceSlice;
var ResourceSliceList;
(function (ResourceSliceList) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSliceList).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceSliceList.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceslicelist-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSliceList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_20.ResourceSliceList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceSliceList shouldn't use an unstable API (resource.v1alpha2.ResourceSliceList).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceSliceList || (ResourceSliceList = {}));
exports.ResourceSliceList = ResourceSliceList;
var ResourceSlicePatch;
(function (ResourceSlicePatch) {
/**
* Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSlicePatch).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
*/
ResourceSlicePatch.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "kubernetes-resource-v1alpha2-resourceslicepatch-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) Kubernetes resouces (resource.v1alpha2.ResourceSlicePatch).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha2_21.ResourceSlicePatch, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Kubernetes ResourceSlicePatch shouldn't use an unstable API (resource.v1alpha2.ResourceSlicePatch).");
}),
},
vendors: ["kubernetes"],
services: ["resource"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ResourceSlicePatch || (ResourceSlicePatch = {}));
exports.ResourceSlicePatch = ResourceSlicePatch;