github.com/argoproj/argo-cd/v3@v3.2.1/resource_customizations/policy.open-cluster-management.io/Policy/testdata/healthy_with_placement_empty_compliant.yaml (about)

     1  apiVersion: policy.open-cluster-management.io/v1
     2  kind: Policy
     3  metadata:
     4    annotations:
     5      argocd.argoproj.io/compare-options: IgnoreExtraneous
     6      argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
     7    labels:
     8      argocd.argoproj.io/instance: acm
     9    name: acm-hub-ca-policy
    10    namespace: open-cluster-management
    11  spec:
    12    disabled: false
    13    policy-templates:
    14    - objectDefinition:
    15        apiVersion: policy.open-cluster-management.io/v1
    16        kind: ConfigurationPolicy
    17        metadata:
    18          name: acm-hub-ca-config-policy
    19        spec:
    20          namespaceSelector:
    21            include:
    22            - default
    23          object-templates:
    24          - complianceType: mustonlyhave
    25            objectDefinition:
    26              apiVersion: v1
    27              data:
    28                hub-kube-root-ca.crt: '{{hub fromConfigMap "" "kube-root-ca.crt" "ca.crt"
    29                  | base64enc hub}}'
    30                hub-openshift-service-ca.crt: '{{hub fromConfigMap "" "openshift-service-ca.crt"
    31                  "service-ca.crt" | base64enc hub}}'
    32              kind: Secret
    33              metadata:
    34                name: hub-ca
    35                namespace: golang-external-secrets
    36              type: Opaque
    37          - complianceType: mustonlyhave
    38            objectDefinition:
    39              apiVersion: v1
    40              data:
    41                hub-kube-root-ca.crt: |
    42                  {{hub fromConfigMap "" "kube-root-ca.crt" "ca.crt" | autoindent hub}}
    43                hub-openshift-service-ca.crt: |
    44                  {{hub fromConfigMap "" "openshift-service-ca.crt" "service-ca.crt" | autoindent hub}}
    45              kind: ConfigMap
    46              metadata:
    47                name: trusted-hub-bundle
    48                namespace: imperative
    49          remediationAction: enforce
    50          severity: medium
    51    remediationAction: enforce
    52  status:
    53    placement:
    54    - placementBinding: acm-hub-ca-policy-placement-binding
    55      placementRule: acm-hub-ca-policy-placement