< img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=3131724&fmt=gif" />
🚀 KubeSphere v4.1.2 with Enhancements and Bug Fixes is available now. Read the release notes for v4.1.2 → close
  • English
    • English
    • 简体中文
    1. 1.Create a KubeSphere Cloud account and log in to the platform.
    2. 2.In the upper-right corner, click Console, and then click Lite Cluster on the left.
    3. 3.Create a K8s cluster with KubeSphere installed.
    4. 4.Access KubeSphere with the default account and password (admin/P@88w0rd).
  •  Star
  1. Docs / 
  2. Documentation / 
  3. Extension User Guide / 
  4. Gatekeeper / 
  5. Constraints / 
  6. Create Constraints

Documentation

Last updated:
    Edit

    Create Constraints

    This section describes how to create a constraint.

    Prerequisites

    • You should join a cluster and have the cluster-admin permission within the cluster. For more information, refer to "Cluster Members" and "Cluster Roles".

    • Gatekeeper should have been installed and enabled.

    • A constraint template has been created.

    Steps

    1. Log in to the KubeSphere web console with a user who has the cluster-admin permission, and access your cluster.

    2. Click Gatekeeper > Constraints in the left navigation pane.

    3. Click Create on the page.

    4. In the Create Constraint dialog, set the following parameters, then click OK.

      ParameterDescription

      Constraint Name

      The name of the constraint.

      Constraint Kind

      The constraint template used by the constraint.

      Enforcement Action

      The enforcementAction field defines the action for handling Constraint violations. The default setting is deny, which means that by default, any admission request that violates the constraint will be denied. For more information, see Handling Constraint Violations.

      Match Kinds

      The match field defines the resources to which the constraint applies. For more information, see match.

      kinds accepts a list of objects with apiGroups and kinds fields that list the groups/kinds of objects to which the constraint will apply. If multiple groups/kinds objects are specified, only one match is needed for the resource to be in scope.

      Namespace Selector

      It is a label selector against an object’s containing namespace or the object itself, if the object is a namespace.

      Parameters

      It describes the intent of a constraint. For more information, see parameters.

      You will view the created constraint on the Constraints page.

    Receive the latest news, articles and updates from KubeSphere


    Thanks for the feedback. If you have a specific question about how to use KubeSphere, ask it on Slack. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.

    Previous : Delete Constraint Templates
    What’s on this Page