-
Notifications
You must be signed in to change notification settings - Fork 149
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comply with OCP 4.11 and 4.12 Pod Security Standards (#2036) #2041
Conversation
Set something like: ``` spec: securityContext: # Do not use SeccompProfile if your project must work on # old k8s versions < 1.19 and Openshift < 4.11 seccompProfile: type: RuntimeDefault runAsNonRoot: true containers: - name: my-container securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL ``` following OCP/OKD 4.12 best practices. This is a manual cherry-pick of kubevirt#2036 Signed-off-by: Simone Tiraboschi <stirabos@redhat.com>
Kudos, SonarCloud Quality Gate passed! 0 Bugs No Coverage information |
Pull Request Test Coverage Report for Build 2739790102
💛 - Coveralls |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: orenc1 The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
@tiraboschi: The following test failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
hco-e2e-image-index-sno-aws lane succeeded. |
@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-image-index-sno-azure In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
ignoring rounding error on coverage |
@tiraboschi: Overrode contexts on behalf of tiraboschi: coverage/coveralls In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/retest |
/test pull-hyperconverged-cluster-operator-e2e-k8s-1.23 |
@orenc1: The specified target(s) for
The following commands are available to trigger optional jobs:
Use In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Set something like:
following OCP/OKD 4.12 best practices.
This is a manual cherry-pick of #2036
Signed-off-by: Simone Tiraboschi stirabos@redhat.com
Reviewer Checklist
Release note: