fix kyverno boolean and resource validation

2026-08-10 17:41:55 -04:00
parent ff033f2fcb
commit b890d131a6
2 changed files with 30 additions and 36 deletions
@@ -27,23 +27,14 @@ spec:
        message: Every container must define CPU and memory limits.
        foreach:
          - list: request.object.spec.containers[]
-            deny:
-              conditions:
-                any:
-                  - key: "{{ element.resources.limits.cpu || '' }}"
-                    operator: Equals
-                    value: ""
-                  - key: "{{ element.resources.limits.memory || '' }}"
-                    operator: Equals
-                    value: ""
+            pattern:
+              resources:
+                limits:
+                  cpu: "?*"
+                  memory: "?*"
          - list: request.object.spec.initContainers[]
-            deny:
-              conditions:
-                any:
-                  - key: "{{ element.resources.limits.cpu || '' }}"
-                    operator: Equals
-                    value: ""
-                  - key: "{{ element.resources.limits.memory || '' }}"
-                    operator: Equals
-                    value: ""
-
+            pattern:
+              resources:
+                limits:
+                  cpu: "?*"
+                  memory: "?*"