This repository has been archived by the owner on Jul 26, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 9
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
docs: adding missing configuration reference
Added Application Security Policy Added External Security Policy Added Service Security Policy
- Loading branch information
1 parent
3f46a3e
commit 3b0555e
Showing
5 changed files
with
103 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1,35 @@ | ||
# Application Security Policy | ||
|
||
Defines an Application Security Policy. | ||
|
||
| Field | Type | Notes | | ||
| ---------- | ---------------------------------------------------------- | -------------------------------------------------------------- | | ||
| apiVersion | `string` | Optional api version for this object. | | ||
| kind | `string` | Identifer for this configuration object. | | ||
| metadata | [`Metadata`](../metadata) | Object metadata, see [metadata](../metadata). | | ||
| spec | [`ApplicationSecurityPolicySpecification`](./#application-security-policy-specification) | See [Application Security Policy Specification](./#application-security-policy-specification). | | ||
|
||
## Application Security Policy Specification | ||
|
||
The specification for an application security policy. | ||
|
||
| Field | Type | Notes | | ||
| -------------- | ---------- | -------------------------------------------------------------- | | ||
| allowedDomains | `string[]` | A list of regular expressions for allowed application domains. | | ||
| blockedDomains | `string[]` | A list of regular expressions for blocked application domains. | | ||
|
||
## Example | ||
|
||
```yaml | ||
--- | ||
kind: applicationSecurityPolicy | ||
metadata: | ||
name: Application Security Policy | ||
description: Security Policy for desktop. | ||
namespace: desktop | ||
spec: | ||
allowedDomains: | ||
- ^https:\/\/.*$ | ||
blockedDomains: | ||
- ^.*\.xxx$ | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1,35 @@ | ||
# External Security Policy | ||
|
||
Defines an External Security Policy. | ||
|
||
| Field | Type | Notes | | ||
| ---------- | ---------------------------------------------------------- | -------------------------------------------------------------- | | ||
| apiVersion | `string` | Optional api version for this object. | | ||
| kind | `string` | Identifer for this configuration object. | | ||
| metadata | [`Metadata`](../metadata) | Object metadata, see [metadata](../metadata). | | ||
| spec | [`ExternalSecurityPolicySpecification`](./#external-security-policy-specification) | See [External Security Policy Specification](./#external-security-policy-specification). | | ||
|
||
## External Security Policy Specification | ||
|
||
The specification for an external security policy. | ||
|
||
| Field | Type | Notes | | ||
| ------------------ | ---------- | ----------------------------------------------------- | | ||
| allowedExecutables | `string[]` | A list of regular expressions for allowed executables. | | ||
| blockedExecutables | `string[]` | A list of regular expressions for blocked executables. | | ||
|
||
## Example | ||
|
||
```yaml | ||
--- | ||
kind: externalSecurityPolicy | ||
metadata: | ||
name: External Security Policy | ||
description: Security Policy for desktop. | ||
namespace: desktop | ||
spec: | ||
allowedExecutables: | ||
- ^Calculator.exe$ | ||
blockedExecutables: | ||
- ^.*$ | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1,33 @@ | ||
# Service Security Policy | ||
|
||
Defines a Service Security Policy. | ||
|
||
| Field | Type | Notes | | ||
| ---------- | ---------------------------------------------------------- | -------------------------------------------------------------- | | ||
| apiVersion | `string` | Optional api version for this object. | | ||
| kind | `string` | Identifer for this configuration object. | | ||
| metadata | [`Metadata`](../metadata) | Object metadata, see [metadata](../metadata). | | ||
| spec | [`ServiceSecurityPolicySpecification`](./#service-security-policy-specification) | See [Service Security Policy Specification](./#service-security-policy-specification). | | ||
|
||
## Service Security Policy Specification | ||
|
||
The specification for a Service security policy. | ||
|
||
| Field | Type | Notes | | ||
| ------------ | ---------- | -------------------------------------------------------- | | ||
| allowedPaths | `string[]` | A list of regular expressions for allowed service paths. | | ||
| blockedPaths | `string[]` | A list of regular expressions for blocked service paths. | | ||
|
||
## Example | ||
|
||
```yaml | ||
--- | ||
kind: serviceSecurityPolicy | ||
metadata: | ||
name: Service Security Policy | ||
description: Security Policy for desktop. | ||
namespace: desktop | ||
spec: | ||
allowedPaths: | ||
- ^.*$ | ||
``` |