built-in-references/Kubernetes/allowed-proc-mount-types/constraint.yaml (12 lines of code) (raw):

apiVersion: constraints.gatekeeper.sh/v1beta1 kind: K8sAzureProcMount metadata: name: psp-proc-mount spec: match: excludedNamespaces: {{ .Values.excludedNamespaces }} kinds: - apiGroups: [""] kinds: ["Pod"] parameters: procMount: {{ .Values.procMount }}