mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

update test scenario and change rule to audit mode

Browse source
This commit is contained in:
Jim Bugwadia 2019-11-07 19:28:48 -08:00
parent a06313b11c
commit ab2e671df5
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
samples/best_practices/disallow_hostpid_hostipc.yaml
View file

@ -9,7 +9,7 @@ metadata:
the container process to communicate with processes on the host. To avoid pod container from the container process to communicate with processes on the host. To avoid pod container from
having visibility to host process space, validate that 'hostPID' and 'hostIPC' are set to 'false'. having visibility to host process space, validate that 'hostPID' and 'hostIPC' are set to 'false'.
spec: spec:
validationFailureAction: enforce validationFailureAction: audit
rules: rules:
- name: validate-host-pid-ipc - name: validate-host-pid-ipc
match: match:

4
test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml
View file

@ -5,13 +5,13 @@ input:
expected: expected:
validation: validation:
policyresponse: policyresponse:
policy: validate-hostpid-hostipc policy: validate-host-pid-ipc
resource: resource:
kind: Pod kind: Pod
apiVersion: v1 apiVersion: v1
namespace: '' namespace: ''
name: "nginx-with-hostpid" name: "nginx-with-hostpid"
rules: rules:
- name: validate-hostpid-hostipc - name: validate-host-pid-ipc
type: Validation type: Validation
success: false success: false