apiVersion: policy.open-cluster-management.io/v1
kind: Policy
metadata:
  name: policy-limitrange-[TIME]
  namespace: default
  annotations:
    policy.open-cluster-management.io/categories: PR.IP Information Protection Processes and Procedures
    policy.open-cluster-management.io/controls: PR.IP-1 Baseline Configuration
    policy.open-cluster-management.io/standards: NIST-CSF
  creationTimestamp: '2021-01-22T16:36:36Z'
  generation: 1
  managedFields:
    - apiVersion: policy.open-cluster-management.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            .: {}
            'f:policy.open-cluster-management.io/categories': {}
            'f:policy.open-cluster-management.io/controls': {}
            'f:policy.open-cluster-management.io/standards': {}
        'f:spec':
          .: {}
          'f:disabled': {}
          'f:policy-templates': {}
          'f:remediationAction': {}
      manager: unknown
      operation: Update
      time: '2021-01-22T16:36:36Z'
    - apiVersion: policy.open-cluster-management.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        'f:status':
          .: {}
          'f:placement': {}
          'f:status': {}
      manager: governance-policy-propagator
      operation: Update
      time: '2021-01-22T16:36:55Z'
  resourceVersion: '193480'
  selfLink: >-
    /apis/policy.open-cluster-management.io/v1/namespaces/default/policies/policy-limitrange-[TIME]
  uid: 0c0cd92c-c98b-4a05-9155-9ebd1ea8aa4e
spec:
  disabled: false
  policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: policy-limitrange-[TIME]-container-mem-limit-range
        spec:
          namespaceSelector:
            exclude:
              - kube-*
            include:
              - default
          object-templates:
            - complianceType: musthave
              objectDefinition:
                apiVersion: v1
                kind: LimitRange
                metadata:
                  name: container-mem-limit-range
                spec:
                  limits:
                    - default:
                        memory: 512Mi
                      defaultRequest:
                        memory: 256Mi
                      type: Container
          remediationAction: inform
          severity: medium
  remediationAction: inform
---
apiVersion: policy.open-cluster-management.io/v1
kind: PlacementBinding
metadata:
  name: binding-policy-limitrange-[TIME]
  namespace: default
placementRef:
  name: placement-policy-limitrange-[TIME]
  kind: PlacementRule
  apiGroup: apps.open-cluster-management.io
subjects:
- name: policy-limitrange-[TIME]
  kind: Policy
  apiGroup: policy.open-cluster-management.io
---
apiVersion: apps.open-cluster-management.io/v1
kind: PlacementRule
metadata:
  name: placement-policy-limitrange-[TIME]
  namespace: default
spec:
  clusterConditions:
  - status: "True"
    type: ManagedClusterConditionAvailable
  clusterSelector:
    matchExpressions:
      []  # selects all clusters if not specified
