Skip to content

Commit

Permalink
updated kyverno version
Browse files Browse the repository at this point in the history
  • Loading branch information
Ishaanj18 committed Dec 30, 2024
1 parent 826150a commit 61bf8d0
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
3 changes: 2 additions & 1 deletion charts/best-practices-k8s/pols/require_drop_all.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ metadata:
policies.kyverno.io/category: Best Practices
policies.kyverno.io/severity: medium
policies.kyverno.io/minversion: 1.6.0
kyverno.io/kyverno-version: 1.10.0
policies.kyverno.io/subject: Pod
policies.kyverno.io/description: >-
Capabilities permit privileged actions without giving full root access. All
Expand All @@ -15,7 +16,7 @@ metadata:
ability. Note that this policy also illustrates how to cover drop entries in any
case although this may not strictly conform to the Pod Security Standards.
spec:
validationFailureAction: audit
validationFailureAction: Audit
background: true
rules:
- name: require-drop-all
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,13 +9,13 @@ metadata:
policies.kyverno.io/subject: Pod,Volume
policies.kyverno.io/minversion: 1.6.0
kyverno.io/kubernetes-version: "1.22-1.23"
kyverno.io/kyverno-version: 1.6.0
kyverno.io/kyverno-version: 1.10.0
policies.kyverno.io/description: >-
In addition to restricting HostPath volumes, the restricted pod security profile
limits usage of non-core volume types to those defined through PersistentVolumes.
This policy blocks any other type of volume other than those in the allow list.
spec:
validationFailureAction: audit
validationFailureAction: Audit
background: true
rules:
- name: restricted-volumes
Expand Down

0 comments on commit 61bf8d0

Please sign in to comment.