mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-29 10:55:05 +00:00
update test scenario and change rule to audit mode
This commit is contained in:
parent
a06313b11c
commit
ab2e671df5
2 changed files with 3 additions and 3 deletions
|
@ -9,7 +9,7 @@ metadata:
|
|||
the container process to communicate with processes on the host. To avoid pod container from
|
||||
having visibility to host process space, validate that 'hostPID' and 'hostIPC' are set to 'false'.
|
||||
spec:
|
||||
validationFailureAction: enforce
|
||||
validationFailureAction: audit
|
||||
rules:
|
||||
- name: validate-host-pid-ipc
|
||||
match:
|
||||
|
|
|
@ -5,13 +5,13 @@ input:
|
|||
expected:
|
||||
validation:
|
||||
policyresponse:
|
||||
policy: validate-hostpid-hostipc
|
||||
policy: validate-host-pid-ipc
|
||||
resource:
|
||||
kind: Pod
|
||||
apiVersion: v1
|
||||
namespace: ''
|
||||
name: "nginx-with-hostpid"
|
||||
rules:
|
||||
- name: validate-hostpid-hostipc
|
||||
- name: validate-host-pid-ipc
|
||||
type: Validation
|
||||
success: false
|
Loading…
Add table
Reference in a new issue