mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-23 16:20:40 +00:00
19b816ba70
* solves the cronjob autogen nested path issue Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com> * format the file using linter Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com> * autogen path change in validating-polcies Signed-off-by: Mohd Kamaal <mohdcode@MBA.local> --------- Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com> Signed-off-by: Mohd Kamaal <mohdcode@MBA.local> Co-authored-by: Mohd Kamaal <mohdcode@MBA.local>
50 lines
No EOL
988 B
YAML
50 lines
No EOL
988 B
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: bad-deployment-1
|
|
labels:
|
|
prod: "true"
|
|
app: bad-nginx
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
prod: "true"
|
|
app: bad-nginx
|
|
template:
|
|
metadata:
|
|
labels:
|
|
prod: "true"
|
|
app: bad-nginx
|
|
spec:
|
|
containers:
|
|
- name: nginx
|
|
image: nginx:latest
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
---
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: bad-cronjob
|
|
spec:
|
|
schedule: "*/5 * * * *"
|
|
concurrencyPolicy: Forbid
|
|
jobTemplate:
|
|
metadata:
|
|
labels:
|
|
prod: "true"
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
prod: "true"
|
|
spec:
|
|
containers:
|
|
- name: secure-container
|
|
image: busybox
|
|
command: ["echo", "Hello, world"]
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
restartPolicy: OnFailure |