1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
kyverno/config
Ryan White c13aeca7fa
Modify capabilities for compatibility with Pod Security (#3274)
Kyverno manifests are incompatible with the restricted Pod Security
Standards included with Kubernetes 1.22 and 1.23 because the Pod
Security admission controller looks for "ALL" in securityContext.capabilities.drop,
but does not accept "all".

1b741f89aa/policy/check_capabilities_restricted.go (L88)

Signed-off-by: Ryan White <ryan@alzabo.io>
2022-02-22 08:14:17 +00:00
..
bundle remove app.kubernetes.io/managed-by label from crds (#2852) 2021-12-21 07:43:44 +00:00
crds fix: typo Cluter to Cluster (#3092) 2022-01-26 22:02:17 +00:00
debug Restructure project to follow standards (#2632) 2021-10-29 18:13:20 +02:00
github tighten and clarify Kyverno roles and permissions (#2799) 2021-12-10 04:34:06 +00:00
k8s-resource add aggregated role for generaterequest (#3240) 2022-02-15 16:15:10 +00:00
manifest Modify capabilities for compatibility with Pod Security (#3274) 2022-02-22 08:14:17 +00:00
release Modify capabilities for compatibility with Pod Security (#3274) 2022-02-22 08:14:17 +00:00
install.yaml Modify capabilities for compatibility with Pod Security (#3274) 2022-02-22 08:14:17 +00:00
install_debug.yaml add aggregated role for generaterequest (#3240) 2022-02-15 16:15:10 +00:00
kustomization.yaml Restructure project to follow standards (#2632) 2021-10-29 18:13:20 +02:00