mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-29 10:55:05 +00:00
update policy and test case
This commit is contained in:
parent
97425392fe
commit
4fbc57bfed
2 changed files with 6 additions and 6 deletions
|
@ -20,12 +20,12 @@ spec:
|
|||
message: "Capabilities cannot be added"
|
||||
anyPattern:
|
||||
- spec:
|
||||
(securityContext):
|
||||
(capabilities):
|
||||
X(add): null
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
||||
- spec:
|
||||
containers:
|
||||
- name: "*"
|
||||
(securityContext):
|
||||
(capabilities):
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
|
@ -14,5 +14,5 @@ expected:
|
|||
rules:
|
||||
- name: deny-new-capabilities
|
||||
type: Validation
|
||||
message: Validation rule 'deny-new-capabilities' failed at '/spec/containers/securityContext/capabilities/add' for resource Pod//capabilities. Capabilities cannot be added
|
||||
message: Validation rule 'deny-new-capabilities' failed to validate patterns defined in anyPattern. Capabilities cannot be added; anyPattern[0] failed at path /spec/; anyPattern[1] failed at path /spec/containers/0/securityContext/capabilities/add/
|
||||
success: false
|
Loading…
Add table
Reference in a new issue