Skip to content

Commit

Permalink
chore: update README
Browse files Browse the repository at this point in the history
  • Loading branch information
f1ames committed Oct 31, 2023
1 parent c991311 commit 9ead0dc
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -403,7 +403,7 @@ metadata:
name: my-policy-binding
spec:
policyName: my-policy
validationActions: [Warn]
validationActions: [Deny]
matchResources:
namespaceSelector:
matchLabels:
Expand Down Expand Up @@ -437,7 +437,7 @@ metadata:
name: my-policy-binding
spec:
policyName: my-policy
validationActions: [Warn]
validationActions: [Deny]
matchResources:
namespaceSelector:
matchExpressions:
Expand All @@ -448,7 +448,7 @@ spec:

The `policyName` field refers to `MonoklePolicy` resource name, while `matchResources` is optional and can be used to narrow binding scope to specific namespace. If follows the same convention as in other Kubernetes kinds, supporting `namespaceSelector` with `matchLabels` and `matchExpressions`.

The `validationActions` support only `Warn` at this stage, which means "send a warning for every policy violation detected". In the upcoming versions it will be expanded to more actions like - `Ignore`, `Report` and `Deny` (see [#10](https://github.com/kubeshop/monokle-admission-controller/issues/10)).
The `validationActions` supports `Warn` and `Deny` actions at this stage. `Warn` means "send a warning for every policy violation detected" and `Deny` will block resource creation/update when there are any violations. In the upcoming versions it will be expanded to more actions like - `Ignore` and `Report` (see [#10](https://github.com/kubeshop/monokle-admission-controller/issues/10)).

## Customizing Helm deployment

Expand Down

0 comments on commit 9ead0dc

Please sign in to comment.