Change to dryrun instead of remove

XenitAB · Dec 13, 2020 · 36fb5a0 · 36fb5a0
1 parent d430f70
commit 36fb5a0
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/modules/kubernetes/opa-gatekeeper/variables.tf b/modules/kubernetes/opa-gatekeeper/variables.tf
@@ -119,6 +119,19 @@ variable "default_constraints" {
       }
       parameters = {}
     },
+    {
+      kind               = "K8sRequiredProbes"
+      name               = "required-probes"
+      enforcement_action = "dryrun"
+      match = {
+        kinds      = []
+        namespaces = []
+      }
+      parameters = {
+        probes     = ["readinessProbe"]
+        probeTypes = ["tcpSocket", "httpGet", "exec"]
+      }
+    },
     {
       kind               = "K8sPodPriorityClass"
       name               = "pod-priority-class"