latest-image.yaml

apiVersion: kubevious.io/v1alpha1
kind: ClusterRule
metadata:
  name: container-latest-image
spec:
  summary: |
    Validate ContainerSpec image to have non latest tag.
  target: |
    Shortcut("ContainerSpec")
  categories:
    - k8s
    - container
    - image
    - latest
  rule: |
    if (helpers.parseImage(config.spec.image).tag === 'latest') {
      error(`Latest Image Tags not allowed: ${config.spec.image}`);
    }