2.4.4.3. Pod nginx 策略示例
您的 Pod nginx 策略可能类似以下 YAML 文件:
apiVersion: policy.open-cluster-management.io/v1
kind: Policy
metadata:
name: policy-pod
namespace: open-cluster-management
spec:
complianceType: musthave
remediationAction: inform
namespaces:
exclude: ["kube-*"]
include: ["default"]
object-templates:
- complianceType: musthave
objectDefinition:
apiVersion: v1
kind: Pod # nginx pod must exist
metadata:
name: nginx-pod
spec:
containers:
- image: nginx:1.7.9
name: nginx
ports:
- containerPort: 80
...了解如何管理 Pod nginx 策略,请参阅管理 Pod nginx 策略以了解更多详细信息。查看由配置控制器监控的其他配置策略,请参阅 Kubernetes 配置策略控制器。请参阅管理安全策略以管理其他策略。