mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

update sysctl

Browse source
This commit is contained in:
Shuting Zhao 2019-10-07 11:35:04 -07:00
parent c80f9e0f9d
commit 16a851cd8b
5 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
examples/best_practices/README.md
View file

@ -22,4 +22,5 @@
| Allow an FSGroup that owns the pod's volumes | [policy_validate_fsgroup.yaml](policy_validate_fsgroup.yaml) | | Allow an FSGroup that owns the pod's volumes | [policy_validate_fsgroup.yaml](policy_validate_fsgroup.yaml) |
| Require SELinux level of the container | [policy_validate_selinux_context.yaml](policy_validate_selinux_context.yaml) | | Require SELinux level of the container | [policy_validate_selinux_context.yaml](policy_validate_selinux_context.yaml) |
| Allow default Proc Mount type | [policy_validate_default_proc_mount.yaml](policy_validate_default_proc_mount.yaml) | | Allow default Proc Mount type | [policy_validate_default_proc_mount.yaml](policy_validate_default_proc_mount.yaml) |
| Allow certain capability to be added | [policy_validate_container_capabilities.yaml](policy_validate_container_capabilities.yaml) | | Allow certain capability to be added | [policy_validate_container_capabilities.yaml](policy_validate_container_capabilities.yaml) |
| Allow local tcp/udp port range | [policy_validate_sysctl_configs.yaml](policy_validate_sysctl_configs.yaml) |

0
examples/best_practices/policy_validate_disallow_sysctl.yaml → examples/best_practices/policy_validate_sysctl_configs.yaml
View file

0
examples/best_practices/resources/resource_disallow_sysctl.yaml → examples/best_practices/resources/resource_validate_sysctl_configs.yaml
View file

2
pkg/testrunner/testrunner_test.go
View file

@ -129,5 +129,5 @@ func Test_validate_container_capabilities(t *testing.T) {
} }
func Test_validate_disallow_sysctl(t *testing.T) { func Test_validate_disallow_sysctl(t *testing.T) {
testScenario(t, "test/scenarios/test/scenario_validate_disallow_sysctl.yaml") testScenario(t, "test/scenarios/test/scenario_validate_sysctl_configs.yaml")
} }

4
test/scenarios/test/scenario_validate_disallow_sysctl.yaml → test/scenarios/test/scenario_validate_sysctl_configs.yaml
View file

@ -1,8 +1,8 @@
# file path relative to project root # file path relative to project root
input: input:
policy: examples/best_practices/policy_validate_disallow_sysctl.yaml policy: examples/best_practices/policy_validate_sysctl_configs.yaml
resource: examples/best_practices/resources/resource_disallow_sysctl.yaml resource: examples/best_practices/resources/resource_validate_sysctl_configs.yaml
expected: expected:
validation: validation:
policyresponse: policyresponse: