built-in-references/Kubernetes/container-resource-limits/constraint.yaml (13 lines of code) (raw):
apiVersion: constraints.gatekeeper.sh/v1beta1
kind: K8sAzureContainerLimits
metadata:
name: container-limits
spec:
match:
excludedNamespaces: {{ .Values.excludedNamespaces }}
kinds:
- apiGroups: [""]
kinds: ["Pod"]
parameters:
cpuLimit : "{{ .Values.cpuLimit }}"
memoryLimit: "{{ .Values.memoryLimit }}"