mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

turn off auto-gen policies for add new capabilities

Browse source
This commit is contained in:
Jim Bugwadia 2020-08-18 21:41:15 -07:00
parent 1235e922df
commit 23fd317eee
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
samples/best_practices/disallow_new_capabilities.yaml
View file

@ -3,6 +3,7 @@ kind: ClusterPolicy
metadata:
name: disallow-new-capabilities
annotations:
pod-policies.kyverno.io/autogen-controllers: none
policies.kyverno.io/category: Security
policies.kyverno.io/description: Linux allows defining fine-grained permissions using
capabilities. With Kubernetes, it is possible to add capabilities that escalate the