1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-29 10:55:05 +00:00

update test scenario and change rule to audit mode

This commit is contained in:
Jim Bugwadia 2019-11-07 19:28:48 -08:00
parent a06313b11c
commit ab2e671df5
2 changed files with 3 additions and 3 deletions

View file

@ -9,7 +9,7 @@ metadata:
the container process to communicate with processes on the host. To avoid pod container from
having visibility to host process space, validate that 'hostPID' and 'hostIPC' are set to 'false'.
spec:
validationFailureAction: enforce
validationFailureAction: audit
rules:
- name: validate-host-pid-ipc
match:

View file

@ -5,13 +5,13 @@ input:
expected:
validation:
policyresponse:
policy: validate-hostpid-hostipc
policy: validate-host-pid-ipc
resource:
kind: Pod
apiVersion: v1
namespace: ''
name: "nginx-with-hostpid"
rules:
- name: validate-hostpid-hostipc
- name: validate-host-pid-ipc
type: Validation
success: false