All Policies
Minimum Backup Retention
K10 Policy resources can be validated to adhere to common compliance retention standards. Uncomment the regulation/compliance standards you want to enforce for according to GFS retention. This policy deletes the retention value in the backup operation and replaces it with the specified retention. Note: K10 Policy uses the GFS retention scheme and export operations default to use the retention of the backup operation. To use different This policy can also be used go reduce retentions lengths to enforce cost optimization.
Policy Definition
/kasten/k10-minimum-retention/k10-override-minimum-retentions.yaml
1apiVersion: kyverno.io/v1
2kind: ClusterPolicy
3metadata:
4 name: k10-policy-minimum-retention
5 annotations:
6 policies.kyverno.io/title: Minimum Backup Retention
7 policies.kyverno.io/category: Kasten K10 by Veeam
8 kyverno.io/kyverno-version: 1.6.2
9 policies.kyverno.io/minversion: 1.6.2
10 kyverno.io/kubernetes-version: "1.21-1.22"
11 policies.kyverno.io/subject: Policy
12 policies.kyverno.io/description: >-
13 K10 Policy resources can be validated to adhere to common compliance retention standards.
14 Uncomment the regulation/compliance standards you want to enforce for according to GFS retention.
15 This policy deletes the retention value in the backup operation and replaces it with the specified retention.
16 Note: K10 Policy uses the GFS retention scheme and export operations default to use the retention of the backup operation.
17 To use different
18 This policy can also be used go reduce retentions lengths to enforce cost optimization.
19spec:
20 rules:
21 - name: k10-policy-minimum-retention
22 match:
23 any:
24 - resources:
25 kinds:
26 - config.kio.kasten.io/v1alpha1/Policy
27 mutate:
28 # Federal Information Security Management Act (FISMA): 3 Years
29 #patchesJson6902: |-
30 # - path: "/spec/retention"
31 # op: replace
32 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":12,"yearly":3}
33
34 # Health Insurance Portability and Accountability Act (HIPAA): 6 Years
35 #patchesJson6902: |-
36 # - path: "/spec/retention"
37 # op: replace
38 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":12,"yearly":6}
39
40 # National Energy Commission (NERC): 3 to 6 Years
41 #patchesJson6902: |-
42 # - path: "/spec/retention"
43 # op: replace
44 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":12,"yearly":3}
45
46 # Basel II Capital Accord: 3 to 7 Years
47 #patchesJson6902: |-
48 # - path: "/spec/retention"
49 # op: replace
50 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":12,"yearly":3}
51
52 # Sarbanes-Oxley Act of 2002 (SOX): 7 Years
53 #patchesJson6902: |-
54 # - path: "/spec/retention"
55 # op: replace
56 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":12,"yearly":7}
57
58 # National Industrial Security Program Operating Manual (NISPOM): 6 to 12 Months
59 #patchesJson6902: |-
60 # - path: "/spec/retention"
61 # op: replace
62 # value: {"hourly":24,"daily":30,"weekly":4,"monthly":6}
63
64 # Cost Optimization (Maximum Retention: 3 Months)
65 patchesJson6902: |-
66 - path: "/spec/retention"
67 op: replace
68 value: {"hourly":24,"daily":30,"weekly":4,"monthly":3}