fix: anti-delete-all-persistence labelSelector

2026-01-27 10:18:27 +00:00 · 2023-11-29 08:55:16 +08:00
parent a975d116fe
commit 1f6cef9e73
1 changed files with 5 additions and 0 deletions
--- a/kube/deploy/core/kyverno/policies/anti-delete-all-persistence.yaml
+++ b/kube/deploy/core/kyverno/policies/anti-delete-all-persistence.yaml
@@ -14,6 +14,11 @@ spec:
          - resources:
              kinds: ["v1/Namespace", "v1/PersistentVolumeClaim", "v1/PersistentVolume", "postgresql.cnpg.io/*/Cluster", "postgres-operator.crunchydata.com/*/PostgresCluster"]
              operations: ["DELETE"]
+              selector:
+                matchExpressions:
+                  - key: "kyverno.home.arpa/delete"
+                    operator: "NotIn"
+                    values: ["CONFIRM-DELETE"]
      validate:
        deny: {}
        message: |