v1.2.1

1 changes since v1.2.0

🐛 Fixes

• Remove limits for ephemeral storage (#24)

v1.2.0

1 changes since v1.1.0

🚀 Features

• Disallow docker build strategy (#22)

v1.1.0

3 changes since v1.0.0

🚀 Features

• Add policy to deny Project creation if requesting user has no default organization (#20)

🛠️ Minor Changes

• Update CPU/Mem resource quotas (#18)
• Introduce ephemeral-storage quotas (#19)

v1.0.0

11 changes since 294750a

🚀 Features

• Import namespace rules (#3)
• Add rule to block creation/editing of reserved namespaces (#8)
• Add generator rule to create rolebinding in new namespaces (#9)
• Inject user's default organization when creating namespace without the organization label (#13)
• Create OCP project template and add organization label to projects (#16)
• Add ResourceQuota and LimitRange to Org Namespace (#15)

🛠️ Minor Changes

• Use request.userInfo.groups to validate the organization label (#14)
• Use recommended syntax for Kyverno match and exclude configurations (#17)

🐛 Fixes

• Allow OpenShift to bypass Namespace policies (#10)
• Fix rule: Add common ns bypass excludes (#11)
• Exempt all (system) clusterroles allowed to edit namespaces from restrictions (#12)