This policy ensures that the name of the ApplicationSet is the same value provided in the project.
apiVersion: kyverno.io/v1kind: ClusterPolicymetadata:name: applicationset-name-matches-projectannotations:policies.kyverno.io/title: Ensure ApplicationSet Name Matches Project in CEL expressionspolicies.kyverno.io/category: Argo in CELpolicies.kyverno.io/severity: mediumkyverno.io/kyverno-version: 1.11.0policies.kyverno.io/minversion: 1.11.0kyverno.io/kubernetes-version: 1.26-1.27policies.kyverno.io/subject: ApplicationSetpolicies.kyverno.io/description: This policy ensures that the name of the ApplicationSet is the same value provided in the project.spec:validationFailureAction: Auditbackground: truerules:- name: match-namematch:any:- resources:kinds:- ApplicationSetoperations:- CREATE- UPDATEvalidate:cel:expressions:- expression: object.spec.template.spec.project == object.metadata.namemessage: The name must match the project.
This policy prevents the use of the default project in an Application.
This policy ensures that the name of the ApplicationSet is the same value provided in the project.
This policy prevents the use of the default project in an Application.