Exemptions CR (v1alpha1)

Exemptions

Field	Type	Description
spec	Spec

Spec

Field	Type	Description
exemptions	Exemptions[]	Policy exemptions

Exemptions

Field	Type	Description
description	string	Reasons as to why this exemption is needed
matcher	Matcher	Resource to exempt (Regex allowed for name)
policies	Policies[] (enum): DisallowHostNamespaces DisallowNodePortServices DisallowPrivileged DisallowSELinuxOptions DropAllCapabilities RequireNonRootUser RestrictCapabilities RestrictExternalNames RestrictHostPathWrite RestrictHostPorts RestrictIstioAmbientOverrides RestrictIstioSidecarOverrides RestrictIstioTrafficOverrides RestrictIstioUser RestrictProcMount RestrictSeccomp RestrictSELinuxType RestrictVolumeTypes	A list of policies to override
title	string	title to give the exemption for reporting purposes

Matcher

Field	Type	Description
kind	string (enum): pod service
name	string
namespace	string