allow only supplementalGroups greater 0 (#1901)

Signed-off-by: Metzger, Simon <smnmtzgr@gmail.com>
2025-03-31 03:45:17 +00:00 · 2021-05-10 19:14:08 +02:00 · 2021-05-10 19:14:08 +02:00 · a65a85e55c
commit a65a85e55c
parent c6b43d65df
1 changed files with 1 additions and 1 deletions
--- a/charts/kyverno/templates/policies/restricted/require-non-root-groups.yaml
+++ b/charts/kyverno/templates/policies/restricted/require-non-root-groups.yaml
@ -48,7 +48,7 @@ spec:
        pattern:
          spec:
            =(securityContext):
-              =(supplementalGroups): ["null"]
+              =(supplementalGroups): ">0"
    - name: check-fsGroup
      match:
        resources: