Create Deny-Service-Type-Nodeport.yaml

loft-sh · Dec 7, 2023 · 3c2648f · 3c2648f
1 parent 0fedc7b
commit 3c2648f
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/examples/by-use-case/Deny-Service-Type-Nodeport.yaml b/examples/by-use-case/Deny-Service-Type-Nodeport.yaml
@@ -0,0 +1,12 @@
+apiVersion: policy.jspolicy.com/v1beta1
+kind: JsPolicy
+metadata:
+  name: "deny-service-type-nodeport.example.com"
+spec:
+  operations: ["CREATE", "UPDATE"]
+  resources: ["services"]
+  javascript: |
+    // This policy blocks Service of type NodePort
+    if (request.object.spec.type === "NodePort") {
+      deny(`${request.name} => service type ${request.object.spec.type} is not allowed!`);
+    }