Pepr policies do not trigger if allowPrivilegeEscalation
is null
#527
Labels
Milestone
allowPrivilegeEscalation
is null
#527
Environment
Kubernetes distro being used: EKS
Steps to reproduce
allowPrivilegeEscalation
.Expected result
allowPrivilegeEscalation
defaults to true when not set, so I would expect to be unable to apply the manifest file.Actual Result
You are allowed to apply the manifest files without Pepr triggering.
Visual Proof (screenshots, videos, text, etc)
Severity/Priority
Medium
Additional Context
Issue is caused by the filtering allowing both undefined and false, when it should only allow false for allowPrivilegeEscalation.
https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://github.com/defenseunicorns/uds-core/blob/main/src/pepr/policies/security.ts#L34-L36
The text was updated successfully, but these errors were encountered: