🚚 Move constraint templates to the Helm crds directory, for more reli…

…able installs and uninstalls
ndebuhr · Jul 7, 2021 · e9e27f7 · e9e27f7
1 parent f839d72
commit e9e27f7
Show file tree

Hide file tree

Showing 2 changed files with 50 additions and 50 deletions.
diff --git a/helm/crds/contraint-templates.yaml b/helm/crds/contraint-templates.yaml
@@ -0,0 +1,50 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+  name: requiredlabels
+spec:
+  crd:
+    spec:
+      names:
+        kind: RequiredLabels
+      validation:
+        openAPIV3Schema:
+          properties:
+            labels:
+              type: array
+              items: string
+  targets:
+  - target: admission.k8s.gatekeeper.sh
+    rego: |
+      package requiredlabels
+      violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+        provided := {label | input.review.object.metadata.labels[label]}
+        required := {label | label := input.parameters.labels[_]}
+        missing := required - provided
+        count(missing) > 0
+        msg := sprintf("you must provide labels: %v", [missing])
+      }
+---
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+  name: deploymentselector
+spec:
+  crd:
+    spec:
+      names:
+        kind: DeploymentSelector
+      validation:
+        openAPIV3Schema:
+          properties:
+            selector:
+              type: string
+  targets:
+    - target: admission.k8s.gatekeeper.sh
+      rego: |
+        package deploymentselector
+        violation[{"msg": msg, "details": {"missing_selector": missing}}] {
+          not input.review.object.spec.selector.matchLabels[input.parameters.selector]
+          missing := input.parameters.selector
+          msg := sprintf("you must include the deployment label selector: %v", [input.parameters.selector])
+        }
diff --git a/helm/templates/policy-app-labels.yaml b/helm/templates/policy-app-labels.yaml
@@ -1,53 +1,3 @@
-apiVersion: templates.gatekeeper.sh/v1beta1
-kind: ConstraintTemplate
-metadata:
-  name: requiredlabels
-spec:
-  crd:
-    spec:
-      names:
-        kind: RequiredLabels
-      validation:
-        openAPIV3Schema:
-          properties:
-            labels:
-              type: array
-              items: string
-  targets:
-  - target: admission.k8s.gatekeeper.sh
-    rego: |
-      package requiredlabels
-      violation[{"msg": msg, "details": {"missing_labels": missing}}] {
-        provided := {label | input.review.object.metadata.labels[label]}
-        required := {label | label := input.parameters.labels[_]}
-        missing := required - provided
-        count(missing) > 0
-        msg := sprintf("you must provide labels: %v", [missing])
-      }
----
-apiVersion: templates.gatekeeper.sh/v1beta1
-kind: ConstraintTemplate
-metadata:
-  name: deploymentselector
-spec:
-  crd:
-    spec:
-      names:
-        kind: DeploymentSelector
-      validation:
-        openAPIV3Schema:
-          properties:
-            selector:
-              type: string
-  targets:
-    - target: admission.k8s.gatekeeper.sh
-      rego: |
-        package deploymentselector
-        violation[{"msg": msg, "details": {"missing_selector": missing}}] {
-          not input.review.object.spec.selector.matchLabels[input.parameters.selector]
-          missing := input.parameters.selector
-          msg := sprintf("you must include the deployment label selector: %v", [input.parameters.selector])
-        }
 ---
 apiVersion: constraints.gatekeeper.sh/v1beta1
 kind: RequiredLabels