mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-31 03:45:17 +00:00
Merge pull request #1067 from nirmata/bugfix/fix_disallow_add_capabilities
fix policy
This commit is contained in:
commit
64d1ee7a9d
2 changed files with 10 additions and 10 deletions
|
@ -27,11 +27,11 @@ spec:
|
|||
validate:
|
||||
message: "New capabilities cannot be added"
|
||||
pattern:
|
||||
- spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: "*"
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
||||
- name: "*"
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
||||
|
||||
````
|
||||
|
|
|
@ -20,9 +20,9 @@ spec:
|
|||
validate:
|
||||
message: "New capabilities cannot be added"
|
||||
pattern:
|
||||
- spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: "*"
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
||||
- name: "*"
|
||||
=(securityContext):
|
||||
=(capabilities):
|
||||
X(add): null
|
||||
|
|
Loading…
Add table
Reference in a new issue