mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity

updates with case insensitivity guarantee (#4954)

Browse source 
* updates with case insensitivity guarantee

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix syntax

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
This commit is contained in:
Chip Zoller 2022-10-17 03:43:12 -04:00 committed by GitHub
parent 3ebb6284cc
commit b522274d74
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/kyverno-policies/Chart.yaml
View file

@ -39,3 +39,5 @@ annotations:
description: Added ability to get additional policies from restricted
- kind: fixed
description: Applied fix in preconditions for background mode
- kind: added
description: Added case insensitivity guarantees to disallow-capabilities-strict

4
charts/kyverno-policies/templates/restricted/disallow-capabilities-strict.yaml
View file

@ -71,7 +71,7 @@ spec:
all:
- key: ALL
operator: AnyNotIn
value: "{{`{{ element.securityContext.capabilities.drop || '' }}`}}"
value: "{{`{{`}} element.securityContext.capabilities.drop[].to_upper(@) || `[]` {{`}}`}}"
- name: adding-capabilities-strict
match:
any:
@ -111,7 +111,7 @@ spec:
deny:
conditions:
all:
- key: "{{`{{ element.securityContext.capabilities.add[] || '' }}`}}"
- key: "{{`{{`}} element.securityContext.capabilities.add[].to_upper(@) || `[]` {{`}}`}}"
operator: AnyNotIn
value:
- NET_BIND_SERVICE