mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-28 18:38:40 +00:00
Code Activity

Walk back change in PSS policy to send to to_upper (#5823)

Browse source 
* removed to_upper

Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>

* additional braces removal

Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>

* undo

Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>

* changes stated in chart.yaml

Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>

Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
This commit is contained in:
Vishal Choudhary 2023-01-03 20:43:54 +05:30 • committed by GitHub
parent b23965cd76
commit 3624697fdc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/kyverno-policies/Chart.yaml
View file

@ -27,3 +27,5 @@ annotations:
description: Add ability to configure autogen behavior
- kind: fixed
description: Support for customLabels, they were ignored up to now
- kind: removed
description: Walk back change in PSS policy to send to to_upper

4
charts/kyverno-policies/templates/restricted/disallow-capabilities-strict.yaml
View file

@ -75,7 +75,7 @@ spec:
all:
- key: ALL
operator: AnyNotIn
value: "{{`{{`}} element.securityContext.capabilities.drop[].to_upper(@) || `[]` {{`}}`}}"
value: "{{`{{`}} element.securityContext.capabilities.drop[] || `[]` {{`}}`}}"
- name: adding-capabilities-strict
match:
any:
@ -115,7 +115,7 @@ spec:
deny:
conditions:
all:
- key: "{{`{{`}} element.securityContext.capabilities.add[].to_upper(@) || `[]` {{`}}`}}"
- key: "{{`{{`}} element.securityContext.capabilities.add[] || `[]` {{`}}`}}"
operator: AnyNotIn
value:
- NET_BIND_SERVICE