Rego Playbook Demo

gistfile1.txt

package play

violation[msg] {
      input.kind == "Service"
      input.spec.type == "NodePort"
      msg := "User is not allowed to create service of type NodePort"
}


### Violation ###
{
  "apiVersion": "v1",
  "kind": "Service",
  "metadata": {
    "name": "my-service"
  },
  "spec": {
    "type": "NodePort",
    "selector": {
      "app": "MyApp"
    }
  }
}

### non-Violent ###
{
  "apiVersion": "v1",
  "kind": "Service",
  "metadata": {
    "name": "my-service"
  },
  "spec": {
    "type": "lol",
    "selector": {
      "app": "MyApp"
    }
  }
}