include other namespaces that include the privileged-movers label

2024-10-22 16:12:35 -05:00 · 2024-10-22 16:12:35 -05:00 · a070f8381b
commit a070f8381b
parent f4ec9777a5
1 changed files with 6 additions and 2 deletions
--- a/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml
+++ b/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml
@ -14,13 +14,17 @@ spec:
  rules:
    - name: set-volsync-movers-custom-config
      match:
-        any:
+        all:
          - resources:
              kinds: ["batch/v1/Job"]
-              namespaces: ["default"]
              selector:
                matchLabels:
                  app.kubernetes.io/created-by: volsync
+          - resources:
+              kinds: ["batch/v1/Job"]
+              namespaceSelector:
+                matchLabels:
+                  volsync.backube/privileged-movers: "true"
      mutate:
        patchStrategicMerge:
          spec: