// code placeholder
apiVersion: policy.open-cluster-management.io/v1
kind: Policy
metadata:
  annotations:
    policy.open-cluster-management.io/categories: SC System and Communications Protection
    policy.open-cluster-management.io/controls: SC-1 SYSTEM AND COMMUNICATIONS PROTECTION
      POLICY AND PROCEDURES
    policy.open-cluster-management.io/standards: NIST SP 800-53
  creationTimestamp: "2024-05-15T08:35:57Z"
  generation: 2
  labels:
    app.kubernetes.io/instance: policies
  name: policy-project-template
  namespace: acm-policies
  resourceVersion: "964815171"
  uid: 3a86a6cd-6ee1-4b8d-9f4f-117b0da9d037
spec:
  disabled: false
  policy-templates:
  - objectDefinition:
      apiVersion: template.openshift.io/v1
      kind: Template
      metadata:
        name: project-request
      objects:
      - apiVersion: project.openshift.io/v1
        kind: Project
        metadata:
          annotations:
            openshift.io/description: ${PROJECT_DESCRIPTION}
            openshift.io/dislay-name: ${PROJECT_DISPLAYNAME}
            openshift.io/requester: ${PROJECT_REQUESTING_USER}
          name: ${PROJECT_NAME}
        spec: {}
        status: {}
      - apiVersion: rbac.authorization.k8s.io/v1
        kind: RoleBinding
        metadata:
          name: admin
          namespace: ${PROJECT_NAME}
        roleRef:
          apiGroup: rbac.authorization.k8s.io
          kind: ClusterRole
          name: admin
        subjects:
        - apiGroup: rbac.authorization.k8s.io
          kind: User
          name: ${PROJECT_ADMIN_USER}
      - apiVersion: v1
        kind: ResourceQuota
        metadata:
          name: compute-resources
        spec:
          hard:
            limits.memory: 5Gi
            requests.cpu: "1"
            requests.memory: 1Gi
      parameters:
      - name: PROJECT_NAME
      - name: PROJECT_DISPLAYNAME
      - name: PROJECT_DESCRIPTION
      - name: PROJECT_ADMIN_USER
      - name: PROJECT_REQUESTING_USER
  remediationAction: enforce