1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00

Merge pull request #1067 from nirmata/bugfix/fix_disallow_add_capabilities

fix policy
This commit is contained in:
Jim Bugwadia 2020-08-19 08:59:07 -07:00 committed by GitHub
commit 64d1ee7a9d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 10 additions and 10 deletions

View file

@ -27,11 +27,11 @@ spec:
validate:
message: "New capabilities cannot be added"
pattern:
- spec:
spec:
containers:
- name: "*"
=(securityContext):
=(capabilities):
X(add): null
- name: "*"
=(securityContext):
=(capabilities):
X(add): null
````

View file

@ -20,9 +20,9 @@ spec:
validate:
message: "New capabilities cannot be added"
pattern:
- spec:
spec:
containers:
- name: "*"
=(securityContext):
=(capabilities):
X(add): null
- name: "*"
=(securityContext):
=(capabilities):
X(add): null