policyDefinitions/Kubernetes/container-allowed-capabilities/template.yaml [10:24]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      validation:
        # Schema for the `parameters` field
        openAPIV3Schema:
          properties:
            allowedCapabilities:
              type: array
              items:
                type: string
            requiredDropCapabilities:
              type: array
              items:
                type: string
  targets:
    - target: admission.k8s.gatekeeper.sh
      rego: |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



policyDefinitions/Kubernetes/container-disallowed-capabilities/template.yaml [10:24]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      validation:
        # Schema for the `parameters` field
        openAPIV3Schema:
          properties:
            allowedCapabilities:
              type: array
              items:
                type: string
            requiredDropCapabilities:
              type: array
              items:
                type: string
  targets:
    - target: admission.k8s.gatekeeper.sh
      rego: |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



