This message was deleted.
# neuvector-securitya
adamant-kite-43734
08/01/2023, 6:17 AMThis message was deleted.
q
quaint-candle-18606
08/02/2023, 12:58 PMHow did you install NeuVector? (Helm? example yaml files? other?)
c
clean-postman-21544
08/02/2023, 1:00 PMHelm. I used only
neuvector-core✅ 1
q
quaint-candle-18606
08/02/2023, 1:26 PMMaybe its crabby that you also didn’t add a namespace?
quaint-candle-18606
08/02/2023, 1:27 PMa la
Copy code
metadata:
name: user-created.test.deny
namespace: test-denyquaint-candle-18606
08/02/2023, 1:27 PMThe namespace needs to exist, as well
quaint-candle-18606
08/02/2023, 1:28 PMIt might be easier in the long run to create the CRD rule in NeuVector and export it versus hand-spinning it. Maybe. 🙂
quaint-candle-18606
08/02/2023, 1:44 PM Copy code
apiVersion: <http://neuvector.com/v1|neuvector.com/v1>
kind: NvAdmissionControlSecurityRule
metadata:
name: local
spec:
config:
client_mode: service
enable: false
mode: monitor
rules:
- action: deny
comment: deny deployments to default ns
criteria:
- name: namespace
op: containsAny
path: namespace
value: default
rule_mode: protectc
clean-postman-21544
08/03/2023, 6:25 AMthank you Jorn!
Your manifests worked, the
config🙌 1
49 Views