built-in-references/Kubernetes/allowed-proc-mount-types/constraint.yaml (12 lines of code) (raw):
apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sAzureProcMount
metadata:
name: psp-proc-mount
spec:
match:
excludedNamespaces: {{ .Values.excludedNamespaces }}
kinds:
- apiGroups: [""]
kinds: ["Pod"]
parameters:
procMount: {{ .Values.procMount }}