2022-02-04 01:47:36 -05:00
|
|
|
podSecurityStandard: restricted
|
|
|
|
|
includeOtherPolicies:
|
|
|
|
|
- require-non-root-groups
|
2022-08-29 19:45:29 +02:00
|
|
|
includeRestrictedPolicies:
|
|
|
|
|
- require-run-as-non-root-user
|
2022-08-25 17:29:20 +02:00
|
|
|
validationFailureActionByPolicy:
|
|
|
|
|
require-non-root-groups: enforce
|
2022-02-09 03:24:35 -05:00
|
|
|
validationFailureActionOverrides:
|
|
|
|
|
all:
|
|
|
|
|
- action: audit
|
|
|
|
|
namespaces:
|
|
|
|
|
- ingress-nginx
|
|
|
|
|
disallow-host-path:
|
|
|
|
|
- action: audit
|
|
|
|
|
namespaces:
|
|
|
|
|
- fluent
|
2022-02-04 01:47:36 -05:00
|
|
|
policyExclude:
|
|
|
|
|
disallow-host-path:
|
|
|
|
|
any:
|
|
|
|
|
- resources:
|
|
|
|
|
kinds:
|
|
|
|
|
- Pod
|
|
|
|
|
namespaces:
|
|
|
|
|
- fluent
|
|
|
|
|
require-non-root-groups:
|
|
|
|
|
any:
|
|
|
|
|
- resources:
|
|
|
|
|
kinds:
|
|
|
|
|
- Pod
|
|
|
|
|
namespaces:
|
|
|
|
|
- fluent
|
