Merge branch 'main' into bump-chainsaw-3

kyverno · Sep 9, 2024 · 13ca12a · 13ca12a
2 parents acf75de + df452ad
commit 13ca12a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/other/restrict-node-label-changes/artifacthub-pkg.yml b/other/restrict-node-label-changes/artifacthub-pkg.yml
@@ -18,4 +18,4 @@ readme: |
 annotations:
   kyverno/category: "Sample"
   kyverno/subject: "Node, Label"
-digest: 5f85ca279377a987568daa4353191e8e843ed6e708ffc9a4163e0fd95ec27894
+digest: 38106c8df0ccdaf9ae63887c117672b7eda38149160fa30d112dff26fa76fcc9
diff --git a/other/restrict-node-label-changes/restrict-node-label-changes.yaml b/other/restrict-node-label-changes/restrict-node-label-changes.yaml
@@ -26,6 +26,7 @@ spec:
           kinds:
           - Node
     validate:
+      allowExistingViolations: false
       message: "Modifying the `foo` label on a Node is not allowed."
       deny:
         conditions:
@@ -51,8 +52,9 @@ spec:
         operator: Equals
         value: "?*"
     validate:
+      allowExistingViolations: false
       message: "Removing the `foo` label on a Node is not allowed."
       pattern:
         metadata:
           labels:
-            foo: "*"
+            foo: "*"