diff --git a/charts/spire/charts/spiffe-csi-driver/templates/policy.yaml b/charts/spire/charts/spiffe-csi-driver/templates/policy.yaml index 6c82b45..0b20d8f 100644 --- a/charts/spire/charts/spiffe-csi-driver/templates/policy.yaml +++ b/charts/spire/charts/spiffe-csi-driver/templates/policy.yaml @@ -17,6 +17,7 @@ spec: resources: ["pods"] validations: - expression: | + !has(object.spec.volumes) || !object.spec.volumes.exists(c, has(c.csi) && has(c.csi.driver) && c.csi.driver == {{ .Values.pluginName | quote }}) message: 'you may not use the upstream.csi.spiffe.io csi driver' ---