cruise-automation / k-rail

Kubernetes security tool for policy enforcement
Apache License 2.0
444 stars 55 forks source link

add CRD protect policy #98

Closed wilreichert closed 3 years ago

wilreichert commented 3 years ago

When a Custom Resource Deinition is deleted the corresponding Custom Resources are deleted as well. This increases the risk of accidentally destroying important data during regular maintenance. This policy allows the user to set the annotation k-rail.crd.protect: enabled on any CRD which will prevent its deletion if any children CRs exist.