policyDefinitions/Kubernetes/do-not-allow-sharing-of-host-process-id-and-ipc-namespaces-in-a-kubernetes-cluster/constraint.yaml (10 lines of code) (raw):

apiVersion: constraints.gatekeeper.sh/v1beta1 kind: K8sAzureBlockHostNamespace metadata: name: psp-host-namespace spec: match: excludedNamespaces: {{ .Values.excludedNamespaces }} kinds: - apiGroups: [""] kinds: ["Pod"]