From ab2e671df5e49ad9135e130a3e68f6ac1a630ebe Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Thu, 7 Nov 2019 19:28:48 -0800 Subject: [PATCH] update test scenario and change rule to audit mode --- samples/best_practices/disallow_hostpid_hostipc.yaml | 2 +- .../scenario_validate_disallow_hostpid_hostipc.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/samples/best_practices/disallow_hostpid_hostipc.yaml b/samples/best_practices/disallow_hostpid_hostipc.yaml index c9075173ae..545d72fafd 100644 --- a/samples/best_practices/disallow_hostpid_hostipc.yaml +++ b/samples/best_practices/disallow_hostpid_hostipc.yaml @@ -9,7 +9,7 @@ metadata: the container process to communicate with processes on the host. To avoid pod container from having visibility to host process space, validate that 'hostPID' and 'hostIPC' are set to 'false'. spec: - validationFailureAction: enforce + validationFailureAction: audit rules: - name: validate-host-pid-ipc match: diff --git a/test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml b/test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml index 01015d1a42..9d57910743 100644 --- a/test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml +++ b/test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml @@ -5,13 +5,13 @@ input: expected: validation: policyresponse: - policy: validate-hostpid-hostipc + policy: validate-host-pid-ipc resource: kind: Pod apiVersion: v1 namespace: '' name: "nginx-with-hostpid" rules: - - name: validate-hostpid-hostipc + - name: validate-host-pid-ipc type: Validation success: false \ No newline at end of file